Windows Analysis Report
https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfe

Compliance

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49781 version: TLS 1.2

Networking

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72

Source: global traffic	HTTP traffic detected: GET /Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/site.css HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg
Source: global traffic	HTTP traffic detected: GET /~/js/JsInteropFuncions.js HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg
Source: global traffic	HTTP traffic detected: GET /images/egress-logo-dark.svg HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8Ede
Source: global traffic	HTTP traffic detected: GET /_framework/blazor.polyfill.min.js HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FB
Source: global traffic	HTTP traffic detected: GET /_framework/blazor.server.js HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AWSALB=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; AWSALBCORS=fcq2qTUoQpeC2BQ1amH9Bdk3MHHf6o3UiraZed0EiNYrwzK1P6GEQYfw2EEV/lEHM/Rt1f2hnaHUOp9lpVKnRlDomfYqE0o2osrJzXl2PRbkCgD2CCa33c55R7fx; .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg
Source: global traffic	HTTP traffic detected: GET /_framework/blazor.polyfill.min.js HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=xJeVELoRQhl5GIg4k13C4aNfmNpnEri3tmo/AzE/xesqQJLrfJ6b1gTLQ5MRiZWZme0kr0RKS2QP4YAuUhbK7UTQFXSFE+xCddYA8cjEMY3zmmo+sEKxbpkXUI+H; AWSALBCORS=xJeVELoRQhl5GIg4k13C4aNfmNpnEri3tmo/AzE/xesqQJLrfJ6b1gTLQ5MRiZWZme0kr0RKS2QP4YAuUhbK7UTQFXSFE+xCddYA8cjEMY3zmmo+sEKxbpkXUI+H
Source: global traffic	HTTP traffic detected: GET /images/egress-logo-dark.svg HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=7EB9+ucJUQDUQ/rB18JySNZIrv19RYJN4BzSwv+tPOXyXaQSRJypOUN1dLTGP19M2l9+s373qCwIuHSgILY6JRhVGyXtdbI82KdFSc42rwEGGj600bnVv9oHxNAS; AWSALBCORS=7EB9+ucJUQDUQ/rB18JySNZIrv19RYJN4BzSwv+tPOXyXaQSRJypOUN1dLTGP19M2l9+s373qCwIuHSgILY6JRhVGyXtdbI82KdFSc42rwEGGj600bnVv9oHxNAS
Source: global traffic	HTTP traffic detected: GET /_framework/blazor.server.js HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG; AWSALBCORS=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG
Source: global traffic	HTTP traffic detected: GET /_blazor/initializers HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG; AWSALBCORS=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2i
Source: global traffic	HTTP traffic detected: GET /images/egress-icon.png HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb8+UG0l/5uTKL9vkcu/IY6Fw8vWrQ74/Lb0BqFn2inpYItsADNCpG; AWSALBCORS=UGGHJ4FtPuE167fNuVEx6MhQj1wGFTzYGa0WdQNsI6SDmnUgnNFvvZ61ZrvjmwehuX09fopb
Source: global traffic	HTTP traffic detected: GET /_blazor/initializers HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC; AWSALBCORS=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC
Source: global traffic	HTTP traffic detected: GET /images/egress-icon.png HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC; AWSALBCORS=Q7rlO4nVO6PIYVSekVQgH/mkk+DZxTeI7oAIzvZYX4Zpfm6VPZ54Eu94S9H6IN9ZCLW/opQA1vMY/hQxIlUsvz212vkrqI9JcpdJIBKYIdvvX4hujlpau1LTTBkC
Source: global traffic	HTTP traffic detected: GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD; AWSALBCORS=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD
Source: global traffic	HTTP traffic detected: GET /_blazor?id=vDQ8W2Jd_iTxgG5lUTuMcw HTTP/1.1Host: links.us1.defend.egress.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://links.us1.defend.egress.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jD; AWSALBCORS=P5sPCYeBEr8RQJveYnbMkcUyJG1cYqVj2PygARDjU5eExdcHn4BAz4iVOA3BFuL3pB6bnrVcJlGSv/K35GN20KrJtz9g/dyoutzzhX8SzSrxdFbuOOrR4UuGD1jDSec-WebSocket-Key: 74yFbjxAtNWPTp9ic8rjFw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_blazor?id=hieRnTZHgQ45O-BAH-H2cw&_=1729760257007 HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version)sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhs
Source: global traffic	HTTP traffic detected: GET /_blazor/negotiate?negotiateVersion=1 HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhsJEUveyYgrRFQQ6gD/M6jO9KcDp6LJPbCE/2yyefuGi1Cnd/; AWSALBCORS=xNAhiArRg+JrXUaQyHXVGDjxB6qKMa4G6v6NOpo6wMavUj42wTU5NfIr2cZul1HTDUPBZjzzfhUhsJEUveyYgrRFQQ6gD/M6jO9KcDp6LJPbCE/2yyefuGi1Cnd/
Source: global traffic	HTTP traffic detected: GET /_blazor?id=hieRnTZHgQ45O-BAH-H2cw&_=1729760257859 HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version)sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OEN
Source: global traffic	HTTP traffic detected: GET /_blazor?id=hieRnTZHgQ45O-BAH-H2cw&_=1729760257007 HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt; AWSALBCORS=jkKANa/JUGBh5Td6ayF0b0wdegAm6bqCH7OYq45PLuqBwW3RoKzZ6yjH6ShwOu8SolW5mqHln3OENhekqnTjO2tRde0ySw1ucv+3vQYKCgPgyDS6njAoYQXtcQWt
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /_blazor?id=hieRnTZHgQ45O-BAH-H2cw HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=Kih4hj2aLY/dIPLY510L2Eqaz30oIN2LMHsh8g8572VCvD3KxE9ajBRwGxIlyTADMx7yzbkSbU2mS12yKa2mnofO5XCQ6YOD69FVNAeXY2EPK1Ubdqhd2X8rMKzf; AWSALBCORS=Kih4hj2aLY/dIPLY510L2Eqaz30oIN2LMHsh8g8572VCvD3KxE9ajBRwGxIlyTADMx7yzbkSbU2mS12yKa2mnofO5XCQ6YOD69FVNAeXY2EPK1Ubdqhd2X8rMKzf
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RTSD3HBpmUBBtC+&MD=5BEvRMR5 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=RTSD3HBpmUBBtC+&MD=5BEvRMR5 HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: links.us1.defend.egress.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /_blazor/negotiate?negotiateVersion=1 HTTP/1.1Host: links.us1.defend.egress.comConnection: keep-aliveContent-Length: 0Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-SignalR-User-Agent: Microsoft SignalR/0.0 (0.0.0-DEV_BUILD; Unknown OS; Browser; Unknown Runtime Version)sec-ch-ua-platform: "Windows"Accept: */*Origin: https://links.us1.defend.egress.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRaAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Antiforgery.VyLW6ORzMgk=CfDJ8DxQtwfDnGVArVCT2c4slwB8_2DMIL3Q16HDke07s6ezO9R9SMZT-MH3Df29FcY0CstdaLSUE_LeGwjrVl57hoO4kH8EdegCVqaXvMmnkIVrZ8mjAFDQz2r0RqgE4lqGoanMvnRlfBWLx-3dg1FBaqg; AWSALB=pZnLT31hIhbPUlIwOblqJ46qC

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 08:57:33 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: AWSALB=EjPGFPOBfMPHOiyi9iDfDAO4IqdCVErJPrmRJGhWEBW8Y2uDaLtM6HNaVngIuEoehrucGc67Zzw2xkYKZZdQ/ipBotKcFCGdjelNFBSjjcIqjQjUM+Q2lhnxmUXz; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/Set-Cookie: AWSALBCORS=EjPGFPOBfMPHOiyi9iDfDAO4IqdCVErJPrmRJGhWEBW8Y2uDaLtM6HNaVngIuEoehrucGc67Zzw2xkYKZZdQ/ipBotKcFCGdjelNFBSjjcIqjQjUM+Q2lhnxmUXz; Expires=Thu, 31 Oct 2024 08:57:33 GMT; Path=/; SameSite=None; SecureCache-Control: no-cache, no-store, max-age=0Pragma: no-cacheX-Robots-Tag: noindexX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: same-originX-Content-Type-Options: nosniffContent-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none'Strict-Transport-Security: max-age=2592000; preloadblazor-enhanced-nav: allow

Source: chromecache_75.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_71.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.5:49781 version: TLS 1.2

System Summary

Source: unknown

Process created: Commandline size = 2058

Source: classification engine

Classification label: clean1.win@16/28@6/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2036,i,8948025775392093946,11875748271062080802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.us1.defend.egress.com/Warning?crId=6719c1fe0a0594bd0e3efe86&Domain=lcatterton.com&Lang=en&Base64Url=eNolVefOpEgMfKLdjwxz0ulEzjnz5wQMDDDkDE9_zZ7UQh2q3MYuu6t1HZe_fn62uaUgmPrd1mXRDvn3dz50P-3yk7d1_v1nG_u_NwiCfyPuGvfyi9VXtqJoY9Z-IQL5DkazSK1JwuSwCshfCDMQqlPoOda5xUgz5HYXPtkiSC4R725tRJe4PxKAfeu7q4qF3mdBGd9BZsjU9BjcxZveonl0nDYcKqZKZZcpIpTTkIVMsXh43ZjUwXBrjbIC8FWt4cetDqzi1_SVAp-YncEhbXB7P5x4KWpvQeETeeJR0t7UmcQJlAGg-DRaTwUGqEQ5Vz1GNaodvKzSEanmVp5COJSTXB77EFo1zuYCf2SUO-pyJwAHNpnlYIZScvTXAiVMYmquMXtnMYj2ohjDdpqh7w4u9UV8cFeZ1xeIIE9OPhcDumzxVEHHrlZHvGDJuWgRn3eIhO2HytMEEF4zzYTYsuCFfZ6RaelpzniA2LkZ-A6ivEcyH6hOh7JwCPD1FYvTa50vL6psKSsHJUTSI_HaqPWsLjeDDiX13Knqy0WRijx7qaWueOfQOrSrPdtCHhhZs6axrZt87uEvnH37cTi7K1JjvgOOW3O5CJ3c3MLv36bCFPsUjTLkBgMgXG1LT58axUuSSqLscpuEnT6KprzOq2bDz_EL5cAgPD79t7hWmIgldT5bDEWS0xRfEXZ5nEa86aF8H8zrnNy6fuKcasIWG8myMXGghZz2aQxogadU0r4qRghWFbaviZCyr7TIMWW6kLiZwFXejm8WxMObUQkMxxhVu9ChElhkVcir7mv2YPJ17Km9Riw5SM0qt7EKQZPwFvC9VmFO26x17yAtau79kIVAK2yQSSGeoGYeEBhMmW8UvK6obJxZaEPCyLHzFHLvuD8jW-RUZlqmDnxxITNZ0E6A4yDZcAN6fIj3BdkHfM7nln6BjdOiZABN4O1R72o9PLvDFHUgGF4Xcq5UsXRkO4GpjVuL42O3Jz-pKL9VranwdYeQ5rgnP7ienRSMRZjiidKObVbcyPQ6H5KCcdJq-BxXGFZWUvsoJKX5CIo2Z8NAcx5B1_LAwif1lWs3i9AH9kopwjbCp6DGspBSxwy86guR8jAXZ2Wk1TAAn5OztNpCofxxfZSIJCZbK_CWToRqpvibrMfy3ZE0__XUgJCplxf4tsZnquCca55DauOxVKTEmiO4QPmCZ_aVhJcLrlmi4kgFxy0fYBacPN5CUNnRFEFCZd3k10zs1ru7CvuzhDf-RdytcxM4J5TLApRT1pkjBROwEEb6BrO5XcLQ9JQsaV0IqTTzvto37VyOnbculrKv1CJUWWp81ACcgmwU_t5hM69S6gQbGjlT10SSse33claFiYvzAnpqJkRD9hiydOxY2rHmbV-l6Z-ikBBwazAY8EVpWydekK3If_6GKbHLjcjNPDcOB8u7fFNqIytXZqjYhIYZzq5vaZmJ62lR_VntoGLh4kzoHaCJfI0R4BHTbLujm1MjXph8ePJnuhAyKfu07moFaaK2FhzRQnPKgTS6rmCBCiTc4k_VUXGMKS_rxHZukcRZzGQafexVV7QbWyHaGSh5AR3UfB8gXMAYeEm6IncwIQKwLNAEIyPNjQJFygCioFLxW6mnOjtxftARNbudbNy__SpIH1gbvFcqZfHromJkY9BhKoKewT0SCS_GviJRnRm2jNLZ3SMSebLFjZUQiT03rpEqhFf0ST5DBxrawkILtzw66_LnCWl8BfdN-pEGd0qO9E1y__IJ9UlfskklLIkKLUDq81JJi-YqYm8Yw3JAbJUKfMpM4cMtiC9jIjhZchsz9ajn5ubk4LAExwmil_5CwIH7WXIiZYIafo3FtF0x0uSFUiBQas_HorQ0rnU6WrJlRa"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=2036,i,8948025775392093946,11875748271062080802,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Boot Survival

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior