Windows Analysis Report
https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d

Overview

General Information

Sample URL: https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHh
Analysis ID: 1541132
Infos:

Detection

HTMLPhisher
Score: 64
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Yara detected HtmlPhish54
AI detected landing page (webpage, office document or email)
Phishing site detected (based on favicon image match)
Phishing site detected (based on image similarity)
Phishing site detected (based on logo match)
Detected hidden input values containing email addresses (often used in phishing pages)
Detected non-DNS traffic on DNS port
Detected suspicious crossdomain redirect
Drops files with a non-matching file extension (content does not match file extension)
HTML body contains low number of good links
HTML page contains hidden javascript code
HTML page contains obfuscated script src

Classification

Phishing
barindex
Yara detected HtmlPhish54
Source: Yara match File source: 1.12.id.script.csv, type: HTML
Source: Yara match File source: 1.17.id.script.csv, type: HTML
Source: Yara match File source: 4.8.pages.csv, type: HTML
Source: Yara match File source: 5.9.pages.csv, type: HTML
Source: Yara match File source: 5.13.pages.csv, type: HTML
Source: Yara match File source: 5.11.pages.csv, type: HTML
Source: Yara match File source: 5.15.pages.csv, type: HTML
Phishing site detected (based on favicon image match)
Source: https://protruck.info Matcher: Template: microsoft matched with high similarity
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true Matcher: Template: microsoft matched with high similarity
Phishing site detected (based on image similarity)
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true Matcher: Found strong image similarity, brand: MICROSOFT
Phishing site detected (based on logo match)
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cm Matcher: Template: microsoft matched
Detected hidden input values containing email addresses (often used in phishing pages)
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: doug.watts@mag-ias.com
HTML body contains low number of good links
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: Number of links: 0
HTML page contains hidden javascript code
Source: https://komettos.com/?email=doug.watts@mag-ias.com HTTP Parser: Base64 decoded: 1729770732.000000
HTML page contains obfuscated script src
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1kb3VnLndhdHRzJTQwbWFnLWlhcy5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjUyZWQ4NTMtMmEzYi1lZWI4LThjMWUtNWUzNGEzMjRmNGQxJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODY1MzY3NTY4MDk1OTAzNC5jMDMwNWRkNC0xNWI1LTQ4ZDQtOGJjZC03MjdlY2JkMmY3OTImc3RhdGU9RFlzeERnSWhFQUJCMzJKaEFiY0N5MEpoZklvQlZwSEVPNHJEM1BlbG1NazBJNFVRNThscEltRktrTGZCb19XRVBrREVDTmJwQWhhUTJha2JabFF1ekFxNXNDSkRyNUxadkNrYU9kX3Iwby0wUEw2OXR1MzVhZHU0Y185VmZhUXg5b3VETlZYVjBxNUxYXzg=&sso_reload=true HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1kb3VnLndhdHRzJTQwbWFnLWlhcy5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjUyZWQ4NTMtMmEzYi1lZWI4LThjMWUtNWUzNGEzMjRmNGQxJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODY1MzY3NTY4MDk1OTAzNC5jMDMwNWRkNC0xNWI1LTQ4ZDQtOGJjZC03MjdlY2JkMmY3OTImc3RhdGU9RFlzeERnSWhFQUJCMzJKaEFiY0N5MEpoZklvQlZwSEVPNHJEM1BlbG1NazBJNFVRNThscEltRktrTGZCb19XRVBrREVDTmJwQWhhUTJha2JabFF1ekFxNXNDSkRyNUxadkNrYU9kX3Iwby0wUEw2OXR1MzVhZHU0Y185VmZhUXg5b3VETlZYVjBxNUxYXzg=&sso_reload=true HTTP Parser: <input type="password" .../> found
Source: file:///C:/Users/user/Downloads/TECHNICAL%20REQUIREMENT%20AND%20PHOTOS%20FOR%20FFG%20Europe%20&%20Americas%20%20MAG%20Automotive,%20LLC.pdf HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/TECHNICAL%20REQUIREMENT%20AND%20PHOTOS%20FOR%20FFG%20Europe%20&%20Americas%20%20MAG%20Automotive,%20LLC.pdf HTTP Parser: No favicon
Source: https://komettos.com/?email=doug.watts@mag-ias.com HTTP Parser: No favicon
Source: https://komettos.com/?email=doug.watts@mag-ias.com HTTP Parser: No favicon
Source: https://viatradings.com/?bonjzjbw=84120126cb3cf67078df84d8ff61c612510d8a15eedeab858d8a7dbea72d0353c8438c32b27f61586682d94845caedad69029d40163e696011a9a38cd9da44d4&email=doug.watts%40mag-ias.com HTTP Parser: No favicon
Source: https://protruck.info/?2ci5wklzq=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 HTTP Parser: No favicon
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No favicon
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No favicon
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No favicon
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No favicon
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No favicon
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No <meta name="author".. found
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No <meta name="author".. found
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No <meta name="author".. found
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No <meta name="author".. found
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No <meta name="copyright".. found
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No <meta name="copyright".. found
Source: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1kb3VnLndhdHRzJTQwbWFnLWlhcy5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjUyZWQ4NTMtMmEzYi1lZWI4LThjMWUtNWUzNGEzMjRmNGQxJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODY1MzY3NTY4MDk1OTAzNC5jMDMwNWRkNC0xNWI1LTQ4ZDQtOGJjZC03MjdlY2JkMmY3OTImc3RhdGU9RFlzeERnSWhFQUJCMzJKaEFiY0N5MEpoZklvQlZwSEVPNHJEM1BlbG1NazBJNFVRNThscEltRktrTGZCb19XRVBrREVDTmJwQWhhUTJha2JabFF1ekFxNXNDSkRyNUxadkNrYU9kX3Iwby0wUEw2OXR1MzVhZHU0Y185VmZhUXg5b3VETlZYVjBxNUxYXzg=&sso_reload=true HTTP Parser: No <meta name="copyright".. found
Source: https://protruck.info/?2ci5wklzq=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&sso_reload=true HTTP Parser: No <meta name="copyright".. found
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49751 version: TLS 1.2
Detected non-DNS traffic on DNS port
Source: global traffic TCP traffic: 192.168.2.4:64813 -> 1.1.1.1:53
Detected suspicious crossdomain redirect
Source: C:\Program Files\Google\Chrome\Application\chrome.exe HTTP traffic: Redirect from: viatradings.com to https://protruck.info/?dataxx0=eyjhbgcioijiuzi1niisinr5cci6ikpxvcj9.eyj1cmwioijodhrwczovl3byb3rydwnrlmluzm8viiwizg9tywluijoichjvdhj1y2suaw5mbyisimtlesi6imq3wkpxd2lit1pbwiisinfyyyi6imrvdwcud2f0dhnabwfnlwlhcy5jb20ilcjpyxqioje3mjk3nza3njqsimv4cci6mtcyotc3mdg4nh0.24f7at_eermj7rf6hmkbt0dlk6ylomfbanghjjag41g
Source: unknown TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: global traffic HTTP traffic detected: GET /api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d HTTP/1.1Host: 2007.filemail.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rrvLlYRNbp24fRB&MD=KxdRDZLV HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rrvLlYRNbp24fRB&MD=KxdRDZLV HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /derujj57 HTTP/1.1Host: tinyurl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic HTTP traffic detected: GET /?email=doug.watts@mag-ias.com HTTP/1.1Host: komettos.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: komettos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Ylc1UUr87BGAG1O0aKE58wEwCko=G3N5idVjmXB7EoriZ6G7LzZ23T0; uFBJWfvWC-PYfpPhsCyALzsfuX8=1729770723; EbkhesZdgvLjZI75YCaEf5F-6P0=1729857123; r6o3MRmli5ovXKeuekP95qTzWr8=VhYThYNpBoJRRQsvtrFNTFGzO14; RrEiVR-O_JZMqed1QhXVp7ptBkk=ufT6EnZHcJWGEWxyr4QxeOiMZTY
Source: global traffic HTTP traffic detected: GET /?email=doug.watts@mag-ias.com HTTP/1.1Host: komettos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://komettos.com/?email=doug.watts@mag-ias.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Ylc1UUr87BGAG1O0aKE58wEwCko=G3N5idVjmXB7EoriZ6G7LzZ23T0; uFBJWfvWC-PYfpPhsCyALzsfuX8=1729770723; EbkhesZdgvLjZI75YCaEf5F-6P0=1729857123; r6o3MRmli5ovXKeuekP95qTzWr8=VhYThYNpBoJRRQsvtrFNTFGzO14; RrEiVR-O_JZMqed1QhXVp7ptBkk=ufT6EnZHcJWGEWxyr4QxeOiMZTY; c8ItwrGkgNKd8tj-fNoBwbgd6BM=1729770731; FRecesQm79yHR1awVn5_lcXO3Dk=1729857131; mLSQ1Vm1bLb1UHqEyWBeL4TYNYM=4zbug0Zqs6nj39bnMtbHpSCyIHE
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f2bbd6738e15/main.js? HTTP/1.1Host: komettos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Ylc1UUr87BGAG1O0aKE58wEwCko=G3N5idVjmXB7EoriZ6G7LzZ23T0; uFBJWfvWC-PYfpPhsCyALzsfuX8=1729770723; EbkhesZdgvLjZI75YCaEf5F-6P0=1729857123; r6o3MRmli5ovXKeuekP95qTzWr8=VhYThYNpBoJRRQsvtrFNTFGzO14; RrEiVR-O_JZMqed1QhXVp7ptBkk=ufT6EnZHcJWGEWxyr4QxeOiMZTY
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f2bbd6738e15/main.js? HTTP/1.1Host: komettos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Ylc1UUr87BGAG1O0aKE58wEwCko=G3N5idVjmXB7EoriZ6G7LzZ23T0; uFBJWfvWC-PYfpPhsCyALzsfuX8=1729770723; EbkhesZdgvLjZI75YCaEf5F-6P0=1729857123; r6o3MRmli5ovXKeuekP95qTzWr8=VhYThYNpBoJRRQsvtrFNTFGzO14; RrEiVR-O_JZMqed1QhXVp7ptBkk=ufT6EnZHcJWGEWxyr4QxeOiMZTY; c8ItwrGkgNKd8tj-fNoBwbgd6BM=1729770731; FRecesQm79yHR1awVn5_lcXO3Dk=1729857131; mLSQ1Vm1bLb1UHqEyWBeL4TYNYM=4zbug0Zqs6nj39bnMtbHpSCyIHE
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f2bbd6738e15/main.js? HTTP/1.1Host: komettos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Ylc1UUr87BGAG1O0aKE58wEwCko=G3N5idVjmXB7EoriZ6G7LzZ23T0; uFBJWfvWC-PYfpPhsCyALzsfuX8=1729770723; EbkhesZdgvLjZI75YCaEf5F-6P0=1729857123; r6o3MRmli5ovXKeuekP95qTzWr8=VhYThYNpBoJRRQsvtrFNTFGzO14; RrEiVR-O_JZMqed1QhXVp7ptBkk=ufT6EnZHcJWGEWxyr4QxeOiMZTY; c8ItwrGkgNKd8tj-fNoBwbgd6BM=1729770731; FRecesQm79yHR1awVn5_lcXO3Dk=1729857131; mLSQ1Vm1bLb1UHqEyWBeL4TYNYM=4zbug0Zqs6nj39bnMtbHpSCyIHE
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: komettos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://komettos.com/?email=doug.watts@mag-ias.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Ylc1UUr87BGAG1O0aKE58wEwCko=G3N5idVjmXB7EoriZ6G7LzZ23T0; uFBJWfvWC-PYfpPhsCyALzsfuX8=1729770723; EbkhesZdgvLjZI75YCaEf5F-6P0=1729857123; r6o3MRmli5ovXKeuekP95qTzWr8=VhYThYNpBoJRRQsvtrFNTFGzO14; RrEiVR-O_JZMqed1QhXVp7ptBkk=ufT6EnZHcJWGEWxyr4QxeOiMZTY; c8ItwrGkgNKd8tj-fNoBwbgd6BM=1729770731; FRecesQm79yHR1awVn5_lcXO3Dk=1729857131; mLSQ1Vm1bLb1UHqEyWBeL4TYNYM=4zbug0Zqs6nj39bnMtbHpSCyIHE
Source: global traffic HTTP traffic detected: GET /?bonjzjbw&email=doug.watts@mag-ias.com HTTP/1.1Host: viatradings.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://komettos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?bonjzjbw=84120126cb3cf67078df84d8ff61c612510d8a15eedeab858d8a7dbea72d0353c8438c32b27f61586682d94845caedad69029d40163e696011a9a38cd9da44d4&email=doug.watts%40mag-ias.com HTTP/1.1Host: viatradings.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://komettos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8d79c2770d74465f HTTP/1.1Host: komettos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: Ylc1UUr87BGAG1O0aKE58wEwCko=G3N5idVjmXB7EoriZ6G7LzZ23T0; uFBJWfvWC-PYfpPhsCyALzsfuX8=1729770723; EbkhesZdgvLjZI75YCaEf5F-6P0=1729857123; r6o3MRmli5ovXKeuekP95qTzWr8=VhYThYNpBoJRRQsvtrFNTFGzO14; RrEiVR-O_JZMqed1QhXVp7ptBkk=ufT6EnZHcJWGEWxyr4QxeOiMZTY; c8ItwrGkgNKd8tj-fNoBwbgd6BM=1729770731; FRecesQm79yHR1awVn5_lcXO3Dk=1729857131; mLSQ1Vm1bLb1UHqEyWBeL4TYNYM=4zbug0Zqs6nj39bnMtbHpSCyIHE
Source: global traffic HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://viatradings.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://viatradings.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s2syz/0x4AAAAAAAxOjUE17trQflJV/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://viatradings.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d79c2a74c378784&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s2syz/0x4AAAAAAAxOjUE17trQflJV/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s2syz/0x4AAAAAAAxOjUE17trQflJV/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d79c2a74c378784&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: viatradings.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://viatradings.com/?bonjzjbw=84120126cb3cf67078df84d8ff61c612510d8a15eedeab858d8a7dbea72d0353c8438c32b27f61586682d94845caedad69029d40163e696011a9a38cd9da44d4&email=doug.watts%40mag-ias.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1920479729:1729702764:xWrkf3FAOjiNDJ2wMo46zI-JMhpGzce4bKuQisqF7u4/8d79c2a74c378784/68TEaJNzOVWzh7dVTAwdzsnosQ6jbeuBldX7_pL2.Ws-1729770742-1.1.1.1-8BDVRACAX9cFtJHR8dhvKhekAH327Tb1H0NjxGRDbX40bDF8Nfw_tR6EFpdlxw_B HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8d79c2a74c378784/1729770745032/8b0f4ca88836d62f63ebe252045156b1c7360d3051d1439fe77ef12468861c5d/o12ZUTmDlDaVfxa HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s2syz/0x4AAAAAAAxOjUE17trQflJV/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8d79c2a74c378784/1729770745037/EjIj_3iD-kt22mw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s2syz/0x4AAAAAAAxOjUE17trQflJV/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8d79c2a74c378784/1729770745037/EjIj_3iD-kt22mw HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1920479729:1729702764:xWrkf3FAOjiNDJ2wMo46zI-JMhpGzce4bKuQisqF7u4/8d79c2a74c378784/68TEaJNzOVWzh7dVTAwdzsnosQ6jbeuBldX7_pL2.Ws-1729770742-1.1.1.1-8BDVRACAX9cFtJHR8dhvKhekAH327Tb1H0NjxGRDbX40bDF8Nfw_tR6EFpdlxw_B HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1920479729:1729702764:xWrkf3FAOjiNDJ2wMo46zI-JMhpGzce4bKuQisqF7u4/8d79c2a74c378784/68TEaJNzOVWzh7dVTAwdzsnosQ6jbeuBldX7_pL2.Ws-1729770742-1.1.1.1-8BDVRACAX9cFtJHR8dhvKhekAH327Tb1H0NjxGRDbX40bDF8Nfw_tR6EFpdlxw_B HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3Byb3RydWNrLmluZm8vIiwiZG9tYWluIjoicHJvdHJ1Y2suaW5mbyIsImtleSI6ImQ3Wkpxd2liT1pBWiIsInFyYyI6ImRvdWcud2F0dHNAbWFnLWlhcy5jb20iLCJpYXQiOjE3Mjk3NzA3NjQsImV4cCI6MTcyOTc3MDg4NH0.24F7AT_eERmj7rf6HmKbT0dlk6YLOmFBAnGhJjag41g HTTP/1.1Host: protruck.infoConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://viatradings.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?qrc=doug.watts%40mag-ias.com HTTP/1.1Host: protruck.infoConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://viatradings.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc
Source: global traffic HTTP traffic detected: GET /owa/?login_hint=doug.watts%40mag-ias.com HTTP/1.1Host: protruck.infoConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://viatradings.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc
Source: global traffic HTTP traffic detected: GET /?2ci5wklzq=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 HTTP/1.1Host: protruck.infoConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://viatradings.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://protruck.info/?2ci5wklzq=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Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n0; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeL70TyCChw4cfuJK5D8sFuVLelcUPMMO4BIRaYMyjaFlfoGyFBG3RTB9f4_8tJdM2YShfD1IVi8M0U_wTChmmy2Z7_3OJAPgc83hhVQiJx1Hn7bmdWYKTLo42UXfjR1JoZzbBzoBQQgPd5nRWnTDNf6Gp_FQ4T8QiMcC6NNY_5IUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic HTTP traffic detected: GET /?2ci5wklzq=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&sso_reload=true HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://protruck.info/?2ci5wklzq=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Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/?2ci5wklzq=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1kb3VnLndhdHRzJTQwbWFnLWlhcy5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjUyZWQ4NTMtMmEzYi1lZWI4LThjMWUtNWUzNGEzMjRmNGQxJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODY1MzY3NTY4MDk1OTAzNC5jMDMwNWRkNC0xNWI1LTQ4ZDQtOGJjZC03MjdlY2JkMmY3OTImc3RhdGU9RFlzeERnSWhFQUJCMzJKaEFiY0N5MEpoZklvQlZwSEVPNHJEM1BlbG1NazBJNFVRNThscEltRktrTGZCb19XRVBrREVDTmJwQWhhUTJha2JabFF1ekFxNXNDSkRyNUxadkNrYU9kX3Iwby0wUEw2OXR1MzVhZHU0Y185VmZhUXg5b3VETlZYVjBxNUxYXzg=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n0; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeL70TyCChw4cfuJK5D8sFuVLelcUPMMO4BIRaYMyjaFlfoGyFBG3RTB9f4_8tJdM2YShfD1IVi8M0U_wTChmmy2Z7_3OJAPgc83hhVQiJx1Hn7bmdWYKTLo42UXfjR1JoZzbBzoBQQgPd5nRWnTDNf6Gp_FQ4T8QiMcC6NNY_5IUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n0; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeL70TyCChw4cfuJK5D8sFuVLelcUPMMO4BIRaYMyjaFlfoGyFBG3RTB9f4_8tJdM2YShfD1IVi8M0U_wTChmmy2Z7_3OJAPgc83hhVQiJx1Hn7bmdWYKTLo42UXfjR1JoZzbBzoBQQgPd5nRWnTDNf6Gp_FQ4T8QiMcC6NNY_5IUgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://protruck.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /mag-ias.com/winauth/ssoprobe?client-request-id=f52ed853-2a3b-eeb8-8c1e-5e34a324f4d1&_=1729770778314 HTTP/1.1Host: autologon.microsoftazuread-sso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js HTTP/1.1Host: protruck.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://protruck.info/?2ci5wklzq=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /common/instrumentation/dssostatus HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js HTTP/1.1Host: protruck.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=d7ZJqwibOZAZ; qPdM.sig=LWl4QP7woPKFgIJ1ISyt3pT_DQc; ClientId=16012557C8854E1FA3F3424CC259834C; OIDC=1; OpenIdConnect.nonce.v3.DA2AzwywupcutXPmNsEwT4DH8KdQapXFiJPzcGvI_WY=638653675680959034.c0305dd4-15b5-48d4-8bcd-727ecbd2f792; X-OWA-RedirectHistory=ArLym14B4mx4YSL03Ag; esctx-Xhh1q4PqLwo=AQABCQEAAADW6jl31mB3T7ugrWTT8pFeYHPcWwIt_PodNzNOMerM-Jh4LFLcD1umCpUQqBIVxnfXfFVMBigI9eL59lB6MSY5cUwDtlnF9X-DvJA4J6j0mYTgQDa-WiHoZCu9qkF3PDnzy43PueA52O--6Epkx6eiIPXTP5ZiRDDRVEq76UbOgyAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; buid=0.ASYAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAA.AQABGgEAAADW6jl31mB3T7ugrWTT8pFeeawOirzuhqdieay1byc8YQx-oGoosjy6QcqMd_wNezqnOfjux9ADZAr-TyBIHYOX2wL1bR65VugR5nwhzlU1lwKEgfolN7fPQTM88XNSmOMgAA; esctx=PAQABBwEAAADW6jl31mB3T7ugrWTT8pFeXUjxSqEFFy7fhW11aNl8su1zW_Sb4YLmF9yDjqzgvWSvZPUSW-cA2hxe6mj4MawKg6w_muxFzOnLJmSx-V2-MECH2VTmQYVJvPbV7W3hiLYeke1VSAH2Qs5dduNQvbI8BX2XaiXaaj9vKCTOih-yGsF57aJt5o_ga1Rv3DsUpxUgAA; esctx-rnJwFRYfTI=AQABCQEAAADW6jl31mB3T7ugrWTT8pFer1UrZk9U0grvdFeyM250yVKt8twE28n1ApG91icpG0qSJPDuVKe-0H5TxtAKl03DSTZAd_sU4H-TB71cHYcPfb9gFFzXaaxL-adgTEILPhDYtt5RjqfWaTC7tvmhIquKMX7dG8tJ78sQ6ScSxYo7gCAA; fpc=AtkNQ4l5TgJKkBNfpxlJ6n2erOTJAQAAABQsrN4OAAAA; brcap=0
Source: global traffic HTTP traffic detected: GET /c1c6b6c8-rs3aqjqynfcvxqjlmwdith4wrp5aqodra2biwt7z5si/logintenantbranding/0/illustration?ts=638024509896203607 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /c1c6b6c8-rs3aqjqynfcvxqjlmwdith4wrp5aqodra2biwt7z5si/logintenantbranding/0/bannerlogo?ts=638487869867254777 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://protruck.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /c1c6b6c8-rs3aqjqynfcvxqjlmwdith4wrp5aqodra2biwt7z5si/logintenantbranding/0/bannerlogo?ts=638487869867254777 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /c1c6b6c8-rs3aqjqynfcvxqjlmwdith4wrp5aqodra2biwt7z5si/logintenantbranding/0/illustration?ts=638024509896203607 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic DNS traffic detected: DNS query: 2007.filemail.com
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: chrome.cloudflare-dns.com
Source: global traffic DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic DNS traffic detected: DNS query: tinyurl.com
Source: global traffic DNS traffic detected: DNS query: komettos.com
Source: global traffic DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: viatradings.com
Source: global traffic DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic DNS traffic detected: DNS query: protruck.info
Source: global traffic DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com
Source: global traffic DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic DNS traffic detected: DNS query: aadcdn.msauthimages.net
Source: global traffic DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: unknown HTTP traffic detected: POST /dns-query HTTP/1.1Host: chrome.cloudflare-dns.comConnection: keep-aliveContent-Length: 128Accept: application/dns-messageAccept-Language: *User-Agent: ChromeAccept-Encoding: identityContent-Type: application/dns-message
Source: global traffic HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 11:52:18 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockCache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutablePragma: publicCF-Cache-Status: HITAge: 253532Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ngaDKAXrNUy3jxmN64XEm%2FyNC1SFWlF6qlH0hjlNobwZqFKRcgaqowexE%2BH2%2BqJNuzU1FpDplYQCqtHjbG%2BlqrZGRlxbtipb%2FDNjBCAke5qWXmthXfX8gITzAFo9Po0%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d79c28bddc04620-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1146&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1605&delivery_rate=2462585&cwnd=251&unsent_bytes=0&cid=dfb46ee47a5d9cf8&ts=161&x=0"
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 11:52:26 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: uG/rd8H8JwoAQU4EKsdkcj5XrzyHdgwv8e8=$OlGCEdzWvN2jyCSOcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8d79c2bcda654762-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 11:52:29 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: r6NyKa127HsfSMOmnlB2301EWLEV3+9ZRys=$mtHieO7+a+GRMxUIServer: cloudflareCF-RAY: 8d79c2d2dac12fec-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 24 Oct 2024 11:52:44 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: Hy2yGTgPRC2mWiAGVkcrWUM3dShsQtQlhCo=$womVrw4IZXa+OKvaServer: cloudflareCF-RAY: 8d79c32b3a563467-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: d7b65f48-d05b-4cb6-98be-596fd462df00x-ms-ests-server: 2.1.19184.6 - SEC ProdSlicesnel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.PReferrer-Policy: strict-origin-when-cross-originDate: Thu, 24 Oct 2024 11:52:51 GMTConnection: closeContent-Length: 0Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';
Source: chromecache_299.2.dr String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_293.2.dr, chromecache_266.2.dr String found in binary or memory: http://knockoutjs.com/
Source: chromecache_293.2.dr, chromecache_266.2.dr String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_293.2.dr, chromecache_266.2.dr String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: 2D85F72862B55C4EADD9E66E06947F3D0.9.dr String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_293.2.dr, chromecache_266.2.dr String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: chromecache_304.2.dr String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_304.2.dr String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_294.2.dr String found in binary or memory: https://viatradings.com/?bonjzjbw&email=doug.watts
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown Network traffic detected: HTTP traffic on port 64857 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown Network traffic detected: HTTP traffic on port 64834 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown Network traffic detected: HTTP traffic on port 64937 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown Network traffic detected: HTTP traffic on port 64914 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64892 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 65002 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64909
Source: unknown Network traffic detected: HTTP traffic on port 64948 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64961 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64900
Source: unknown Network traffic detected: HTTP traffic on port 64903 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64903
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64902
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64905
Source: unknown Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64904
Source: unknown Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64906
Source: unknown Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown Network traffic detected: HTTP traffic on port 64972 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown Network traffic detected: HTTP traffic on port 64846 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64880 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64919
Source: unknown Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64845 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64912
Source: unknown Network traffic detected: HTTP traffic on port 64893 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64914
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64913
Source: unknown Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64916
Source: unknown Network traffic detected: HTTP traffic on port 64902 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64918
Source: unknown Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64917
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown Network traffic detected: HTTP traffic on port 64973 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64910
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64922
Source: unknown Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64823 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64927
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64929
Source: unknown Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown Network traffic detected: HTTP traffic on port 64936 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64921
Source: unknown Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64904 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64927 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64971 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown Network traffic detected: HTTP traffic on port 64938 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown Network traffic detected: HTTP traffic on port 64982 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 65001 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64856 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64821 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64894 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64959 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown Network traffic detected: HTTP traffic on port 64960 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64878 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64949 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64855 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 65000 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64822 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown Network traffic detected: HTTP traffic on port 64833 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64844 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown Network traffic detected: HTTP traffic on port 64872 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64857
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64978
Source: unknown Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64856
Source: unknown Network traffic detected: HTTP traffic on port 64952 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64977
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64859
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64858
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64979
Source: unknown Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64970
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64851
Source: unknown Network traffic detected: HTTP traffic on port 64889 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64972
Source: unknown Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64850
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64971
Source: unknown Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64853
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64974
Source: unknown Network traffic detected: HTTP traffic on port 64998 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64852
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64973
Source: unknown Network traffic detected: HTTP traffic on port 64975 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64855
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64854
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64975
Source: unknown Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64883 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64917 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64990
Source: unknown Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64940 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64814 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64989
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64869
Source: unknown Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64860
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64981
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64980
Source: unknown Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64825 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64862
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64861
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64982
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64864
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64863
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64866
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64865
Source: unknown Network traffic detected: HTTP traffic on port 64916 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64939 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64964 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64880
Source: unknown Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64859 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64890 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64878
Source: unknown Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64871
Source: unknown Network traffic detected: HTTP traffic on port 64826 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64873
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64872
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64875
Source: unknown Network traffic detected: HTTP traffic on port 64860 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64874
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64877
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64998
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64876
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64997
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64891
Source: unknown Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64890
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown Network traffic detected: HTTP traffic on port 64837 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64871 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64953 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64889
Source: unknown Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64905 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64882
Source: unknown Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64881
Source: unknown Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64884
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64883
Source: unknown Network traffic detected: HTTP traffic on port 64848 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64886
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64885
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64887
Source: unknown Network traffic detected: HTTP traffic on port 64882 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64962 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64918 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64934
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64933
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64815
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64936
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64814
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64935
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64817
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64938
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64937
Source: unknown Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64819
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64818
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64939
Source: unknown Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64824 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64932
Source: unknown Network traffic detected: HTTP traffic on port 64847 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64891 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64835 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64824
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64945
Source: unknown Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64823
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64944
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64826
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64947
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64825
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64946
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64828
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64949
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64827
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64948
Source: unknown Network traffic detected: HTTP traffic on port 64951 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64829
Source: unknown Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64820
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64941
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64940
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64822
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64943
Source: unknown Network traffic detected: HTTP traffic on port 64997 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64821
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64942
Source: unknown Network traffic detected: HTTP traffic on port 64941 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64836 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64835
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64956
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64834
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64955
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64837
Source: unknown Network traffic detected: HTTP traffic on port 64929 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64958
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64836
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64957
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64839
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64838
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64959
Source: unknown Network traffic detected: HTTP traffic on port 64906 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64831
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64952
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64830
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64951
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64833
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64954
Source: unknown Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64832
Source: unknown Network traffic detected: HTTP traffic on port 64881 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64953
Source: unknown Network traffic detected: HTTP traffic on port 64858 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64963 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64846
Source: unknown Network traffic detected: HTTP traffic on port 64869 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64967
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64845
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64966
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64848
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64969
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64847
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64849
Source: unknown Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64840
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64961
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64960
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64842
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64963
Source: unknown Network traffic detected: HTTP traffic on port 64974 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64841
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64962
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64844
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64965
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64843
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 64964
Source: unknown Network traffic detected: HTTP traffic on port 64989 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64966 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64943 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64828 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64990 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 64852 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: classification engine Classification label: mal64.phis.win@69/120@44/16
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Users\user\Downloads\ff234e92-9609-4861-bc46-b86423398a1c.tmp Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-24 07-51-44-948.log Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=2176,i,2064118455794809402,13504023316231498835,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d"
Source: unknown Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\TECHNICAL REQUIREMENT AND PHOTOS FOR FFG Europe & Americas MAG Automotive, LLC.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1632,i,3999679361341177568,13946645876680609577,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://tinyurl.com/derujj57"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=1996,i,12804470632104292396,2928061378250895118,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 --field-trial-handle=2176,i,2064118455794809402,13504023316231498835,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2100 --field-trial-handle=1632,i,3999679361341177568,13946645876680609577,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=1996,i,12804470632104292396,2928061378250895118,262144 /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe File opened: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\crash_reporter.cfg Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected

Persistence and Installation Behavior
barindex
AI detected landing page (webpage, office document or email)
Source: file:///C:/Users/user/Downloads/TECHNICAL%20REQUIREMENT%20AND%20PHOTOS%20FOR%20FFG%20Europe%20&%20Americas%20%20MAG%20Automotive,%20LLC.pdf LLM: Page contains button: 'View in OneDrive' Source: '0.1.pages.csv'
Source: file:///C:/Users/user/Downloads/TECHNICAL%20REQUIREMENT%20AND%20PHOTOS%20FOR%20FFG%20Europe%20&%20Americas%20%20MAG%20Automotive,%20LLC.pdf LLM: Page contains button: 'View in OneDrive' Source: '0.0.pages.csv'
Drops files with a non-matching file extension (content does not match file extension)
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: Chrome Cache Entry: 280
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: Chrome Cache Entry: 280 Jump to dropped file
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1541132 URL: https://2007.filemail.com/a... Startdate: 24/10/2024 Architecture: WINDOWS Score: 64 39 x1.i.lencr.org 2->39 41 tinyurl.com 2->41 43 9 other IPs or domains 2->43 51 Yara detected HtmlPhish54 2->51 53 Phishing site detected (based on image similarity) 2->53 55 Phishing site detected (based on favicon image match) 2->55 57 2 other signatures 2->57 8 chrome.exe 14 2->8         started        11 Acrobat.exe 18 72 2->11         started        13 chrome.exe 2->13         started        15 chrome.exe 2->15         started        signatures3 process4 dnsIp5 45 192.168.2.4, 138, 443, 49231 unknown unknown 8->45 47 239.255.255.250 unknown Reserved 8->47 17 chrome.exe 8->17         started        20 AcroCEF.exe 107 11->20         started        22 chrome.exe 13->22         started        process6 dnsIp7 27 www.google.com 216.58.206.36, 443, 49739, 49818 GOOGLEUS United States 17->27 29 ip.2007.filemail.com 50.7.84.74, 443, 49735, 49736 COGENT-174US United States 17->29 31 2007.filemail.com 17->31 24 AcroCEF.exe 2 20->24         started        33 s-part-0017.t-0009.fb-t-msedge.net 13.107.253.45, 443, 64946 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 22->33 35 autologon.microsoftazuread-sso.com 40.126.31.73, 443, 64966 MICROSOFT-CORP-MSN-AS-BLOCKUS United States 22->35 37 21 other IPs or domains 22->37 process8 dnsIp9 49 chrome.cloudflare-dns.com 172.64.41.3, 443, 49909, 49910 CLOUDFLARENETUS United States 24->49
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
104.18.94.41
 challenges.cloudflare.com United States
13335 CLOUDFLARENETUS false
216.58.206.36
 www.google.com United States
15169 GOOGLEUS false
142.250.185.164
 unknown United States
15169 GOOGLEUS false
35.190.80.1
 a.nel.cloudflare.com United States
15169 GOOGLEUS false
172.64.41.3
 chrome.cloudflare-dns.com United States
13335 CLOUDFLARENETUS false
52.98.152.162
 ooc-g2.tm-4.office.com United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
50.7.84.74
 ip.2007.filemail.com United States
174 COGENT-174US false
13.107.253.45
 s-part-0017.t-0009.fb-t-msedge.net United States
8068 MICROSOFT-CORP-MSN-AS-BLOCKUS false
104.18.95.41
 unknown United States
13335 CLOUDFLARENETUS false
40.126.31.73
 autologon.microsoftazuread-sso.com United States
8075 MICROSOFT-CORP-MSN-AS-BLOCKUS false
239.255.255.250
 unknown Reserved
unknown unknown false
188.114.97.3
 komettos.com European Union
13335 CLOUDFLARENETUS false
194.164.76.123
 viatradings.com United Kingdom
8897 KCOM-SPNService-ProviderNetworkex-MistralGB false
104.17.112.233
 tinyurl.com United States
13335 CLOUDFLARENETUS false
152.199.21.175
 sni1gl.wpc.upsiloncdn.net United States
15133 EDGECASTUS false

Private

IP
192.168.2.4

Contacted Domains

Name IP Active
chrome.cloudflare-dns.com 172.64.41.3 true
s-part-0044.t-0009.fb-t-msedge.net 13.107.253.72 true
tinyurl.com 104.17.112.233 true
a.nel.cloudflare.com 35.190.80.1 true
s-part-0017.t-0009.fb-t-msedge.net 13.107.253.45 true
s-part-0017.t-0009.t-msedge.net 13.107.246.45 true
ip.2007.filemail.com 50.7.84.74 true
s-part-0039.t-0009.fb-t-msedge.net 13.107.253.67 true
komettos.com 188.114.97.3 true
viatradings.com 194.164.76.123 true
autologon.microsoftazuread-sso.com 40.126.31.73 true
protruck.info 194.164.76.123 true
ooc-g2.tm-4.office.com 52.98.152.162 true
sni1gl.wpc.upsiloncdn.net 152.199.21.175 true
challenges.cloudflare.com 104.18.94.41 true
sni1gl.wpc.omegacdn.net 152.199.21.175 true
www.google.com 216.58.206.36 true
s-part-0032.t-0009.t-msedge.net 13.107.246.60 true
x1.i.lencr.org unknown unknown
r4.res.office365.com unknown unknown
aadcdn.msftauth.net unknown unknown
outlook.office365.com unknown unknown
aadcdn.msauthimages.net unknown unknown
2007.filemail.com unknown unknown
identity.nel.measure.office.net unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://2007.filemail.com/api/file/get?filekey=58mKUrTMdlmzqkRvo0UdVa2TMjJTCQiSNv5rUBtsDQTNU0dM4JzppUJaOrP_mWxCym0k9l5xEDeaXunPsHq6frY8XZH_gnclw86MefA3bpAlGuDkr77-xSqrMOQIlMdW5cRjwoOSCWIlTwpC48cNKMMHhMKp&track=P8fpm4ry&pk_vid=8a8b18f03738ae4f17297703684d559d false
    		unknown
    https://komettos.com/favicon.ico false
      		unknown
      https://a.nel.cloudflare.com/report/v4?s=SDDV1MXRM2tJHpbqtZPzYf6UI9LVPAcTTZk1Sb%2B0A2VdgbRT6nk2222lG9fm5vl2vw%2B%2F6dktb9PcK23OcjvJcREd6OQMqd2zJM3TUihQerU%2BxD6SjWxRFGVKh7BCfyk%3D false
        		unknown
        https://a.nel.cloudflare.com/report/v4?s=ngaDKAXrNUy3jxmN64XEm%2FyNC1SFWlF6qlH0hjlNobwZqFKRcgaqowexE%2BH2%2BqJNuzU1FpDplYQCqtHjbG%2BlqrZGRlxbtipb%2FDNjBCAke5qWXmthXfX8gITzAFo9Po0%3D false
          		unknown
          https://tinyurl.com/derujj57 false
            		unknown
            https://outlook.office365.com/owa/prefetch.aspx false
              		unknown
              https://protruck.info/favicon.ico true
                		unknown
                https://protruck.info/?qrc=doug.watts%40mag-ias.com true
                  		unknown
                  https://komettos.com/cdn-cgi/challenge-platform/scripts/jsd/main.js false
                    		unknown
                    https://protruck.info/owa/?login_hint=doug.watts%40mag-ias.com true
                      		unknown
                      https://a.nel.cloudflare.com/report/v4?s=q%2FnnsGMUNtvJdErvAZRlyXF8uH2H%2FJsCD24oTAR2ZiS2wRMEWYVdwpeU85RfLEGp5LsAJVjz%2BRk1UG1u6zZItnI0%2Fm64hfkm%2BC7V2dFo%2FOIOaAO4g1DWT3iQh1QM3Lw%3D false
                        		unknown
                        https://autologon.microsoftazuread-sso.com/mag-ias.com/winauth/ssoprobe?client-request-id=f52ed853-2a3b-eeb8-8c1e-5e34a324f4d1&_=1729770778314 false
                          		unknown
                          https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback false
                            		unknown
                            https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/s2syz/0x4AAAAAAAxOjUE17trQflJV/auto/fbE/normal/auto/ false
                              		unknown
                              https://komettos.com/?email=doug.watts@mag-ias.com false
                                		unknown
                                https://komettos.com/cdn-cgi/challenge-platform/h/g/jsd/r/8d79c2770d74465f false
                                  		unknown
                                  https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8d79c2a74c378784/1729770745032/8b0f4ca88836d62f63ebe252045156b1c7360d3051d1439fe77ef12468861c5d/o12ZUTmDlDaVfxa false
                                    		unknown
                                    https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1920479729:1729702764:xWrkf3FAOjiNDJ2wMo46zI-JMhpGzce4bKuQisqF7u4/8d79c2a74c378784/68TEaJNzOVWzh7dVTAwdzsnosQ6jbeuBldX7_pL2.Ws-1729770742-1.1.1.1-8BDVRACAX9cFtJHR8dhvKhekAH327Tb1H0NjxGRDbX40bDF8Nfw_tR6EFpdlxw_B false
                                      		unknown
                                      file:///C:/Users/user/Downloads/TECHNICAL%20REQUIREMENT%20AND%20PHOTOS%20FOR%20FFG%20Europe%20&%20Americas%20%20MAG%20Automotive,%20LLC.pdf true
                                        		unknown
                                        https://chrome.cloudflare-dns.com/dns-query false
                                        • URL Reputation: safe
                                        		 unknown
                                        https://komettos.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/f2bbd6738e15/main.js? false
                                          		unknown
                                          https://aadcdn.msauthimages.net/c1c6b6c8-rs3aqjqynfcvxqjlmwdith4wrp5aqodra2biwt7z5si/logintenantbranding/0/bannerlogo?ts=638487869867254777 false
                                            		unknown
                                            https://viatradings.com/favicon.ico false
                                              		unknown
                                              https://protruck.info/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3Byb3RydWNrLmluZm8vIiwiZG9tYWluIjoicHJvdHJ1Y2suaW5mbyIsImtleSI6ImQ3Wkpxd2liT1pBWiIsInFyYyI6ImRvdWcud2F0dHNAbWFnLWlhcy5jb20iLCJpYXQiOjE3Mjk3NzA3NjQsImV4cCI6MTcyOTc3MDg4NH0.24F7AT_eERmj7rf6HmKbT0dlk6YLOmFBAnGhJjag41g true
                                                		unknown
                                                https://protruck.info/common/instrumentation/dssostatus true
                                                  		unknown
                                                  https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1 false
                                                    		unknown
                                                    https://viatradings.com/?bonjzjbw=84120126cb3cf67078df84d8ff61c612510d8a15eedeab858d8a7dbea72d0353c8438c32b27f61586682d94845caedad69029d40163e696011a9a38cd9da44d4&email=doug.watts%40mag-ias.com false
                                                      		unknown
                                                      https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8d79c2a74c378784&lang=auto false
                                                        		unknown
                                                        https://aadcdn.msauthimages.net/c1c6b6c8-rs3aqjqynfcvxqjlmwdith4wrp5aqodra2biwt7z5si/logintenantbranding/0/illustration?ts=638024509896203607 false
                                                          		unknown
                                                          https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8d79c2a74c378784/1729770745037/EjIj_3iD-kt22mw false
                                                            		unknown
                                                            https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js false
                                                              		unknown
                                                              https://viatradings.com/?bonjzjbw&email=doug.watts@mag-ias.com false
                                                                		unknown