Edit tour

Windows Analysis Report
https://mandrillapp.com/track/click/30927070/campaignagent.com.au?p=eyJzIjoibjZvUGt3cG1JWjg3YlU2enA4UWJpRWhQR3Q0IiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2NhbXBhaWduYWdlbnQuY29tLmF1XFxcL2xlZ2Fsc1xcXC9cIixcImlkXCI6XCJiNGU0NTg1ZGEyNzY0M2QyOGJmZDAwYjJkODUzYTAxZlwi

Overview

General Information

Sample URL:	https://mandrillapp.com/track/click/30927070/campaignagent.com.au?p=eyJzIjoibjZvUGt3cG1JWjg3YlU2enA4UWJpRWhQR3Q0IiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2NhbXBh
Analysis ID:	1545594
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Form action URLs do not match main URL

HTML body contains low number of good links

No HTML title found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1196,i,5139011310192161647,1014720333673730124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mandrillapp.com/track/click/30927070/campaignagent.com.au?p=eyJzIjoibjZvUGt3cG1JWjg3YlU2enA4UWJpRWhQR3Q0IiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2NhbXBhaWduYWdlbnQuY29tLmF1XFxcL2xlZ2Fsc1xcXC9cIixcImlkXCI6XCJiNGU0NTg1ZGEyNzY0M2QyOGJmZDAwYjJkODUzYTAxZlwiLFwidXJsX2lkc1wiOltcIjg3NWRlNWViZTBmZWJjYzM4ZDExOTNhYzhlOWFkYzM4YmE4MmRmNWNcIl19In0" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-PG3586BGZR&gtm=45je4as0v884104787za200&_p=1730307017123&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533422~101823848~101878899~101878944~101925629&gdid=dZTNiMT&cid=1638488665.1730307022&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=EA&_s=1&sid=1730307022&sct=1&seg=0&dl=https%3A%2F%2Fcampaignagent.com.au%2Flegals%2F&dt=CampaignAgent%20%2F%2F%20Legals&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=29366 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://campaignagent.com.auX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://campaignagent.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://campaignagent.com.au/legals/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/8551437/8ace5836-6d44-4615-a0cc-19fa772da38a com hsforms
Source: https://campaignagent.com.au/legals/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/8551437/8ace5836-6d44-4615-a0cc-19fa772da38a com hsforms
Source: https://campaignagent.com.au/legals/	HTTP Parser: Form action: https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/8551437/8ace5836-6d44-4615-a0cc-19fa772da38a com hsforms

Source: https://campaignagent.com.au/legals/	HTTP Parser: HTML title missing
Source: https://campaignagent.com.au/legals/	HTTP Parser: HTML title missing
Source: https://campaignagent.com.au/legals/	HTTP Parser: HTML title missing

Source: https://campaignagent.com.au/legals/	HTTP Parser: No favicon
Source: https://campaignagent.com.au/legals/	HTTP Parser: No favicon
Source: https://campaignagent.com.au/legals/	HTTP Parser: No favicon
Source: https://campaignagent.com.au/legals/	HTTP Parser: No favicon
Source: https://campaignagent.com.au/legals/	HTTP Parser: No favicon

Source: https://campaignagent.com.au/legals/	HTTP Parser: No <meta name="author".. found
Source: https://campaignagent.com.au/legals/	HTTP Parser: No <meta name="author".. found
Source: https://campaignagent.com.au/legals/	HTTP Parser: No <meta name="author".. found

Source: https://campaignagent.com.au/legals/	HTTP Parser: No <meta name="copyright".. found
Source: https://campaignagent.com.au/legals/	HTTP Parser: No <meta name="copyright".. found
Source: https://campaignagent.com.au/legals/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:61353 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:61354 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: mandrillapp.com
Source: global traffic	DNS traffic detected: DNS query: campaignagent.com.au
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: campaignagent.snapforms.com.au
Source: global traffic	DNS traffic detected: DNS query: js.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: cdn.snapforms.com.au
Source: global traffic	DNS traffic detected: DNS query: js.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: widget.trustpilot.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: 200.163.202.172.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: js.hsadspixel.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: browser.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: csp-report.browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: api.hubapi.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1196,i,5139011310192161647,1014720333673730124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mandrillapp.com/track/click/30927070/campaignagent.com.au?p=eyJzIjoibjZvUGt3cG1JWjg3YlU2enA4UWJpRWhQR3Q0IiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2NhbXBhaWduYWdlbnQuY29tLmF1XFxcL2xlZ2Fsc1xcXC9cIixcImlkXCI6XCJiNGU0NTg1ZGEyNzY0M2QyOGJmZDAwYjJkODUzYTAxZlwiLFwidXJsX2lkc1wiOltcIjg3NWRlNWViZTBmZWJjYzM4ZDExOTNhYzhlOWFkYzM4YmE4MmRmNWNcIl19In0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1196,i,5139011310192161647,1014720333673730124,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: chromecache_260.2.dr, chromecache_462.2.dr	String found in binary or memory: <div class="socialfollow"><a target="_blank" href="https://www.facebook.com/campaignagent/" data-network="facebook" class="facebook"><i class="wn-fab wn-fa-facebook" data-network="facebook"></i></a><a target="_blank" href="https://www.instagram.com/campaignagent/" data-network="instagram" class="instagram"><i class="wn-fab wn-fa-instagram" data-network="instagram"></i></a><a target="_blank" href="https://www.linkedin.com/company/campaignagent" data-network="linkedin" class="linkedin"><i class="wn-fab wn-fa-linkedin" data-network="linkedin"></i></a></div></div> equals www.facebook.com (Facebook)
Source: chromecache_260.2.dr, chromecache_462.2.dr	String found in binary or memory: <div class="socialfollow"><a target="_blank" href="https://www.facebook.com/campaignagent/" data-network="facebook" class="facebook"><i class="wn-fab wn-fa-facebook" data-network="facebook"></i></a><a target="_blank" href="https://www.instagram.com/campaignagent/" data-network="instagram" class="instagram"><i class="wn-fab wn-fa-instagram" data-network="instagram"></i></a><a target="_blank" href="https://www.linkedin.com/company/campaignagent" data-network="linkedin" class="linkedin"><i class="wn-fab wn-fa-linkedin" data-network="linkedin"></i></a></div></div> equals www.linkedin.com (Linkedin)
Source: chromecache_260.2.dr, chromecache_462.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-facebook elementor-repeater-item-1ec3014" href="https://www.facebook.com/campaignagent/" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_260.2.dr, chromecache_462.2.dr	String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-linkedin elementor-repeater-item-c03f30c" href="https://www.linkedin.com/company/campaignagent" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_260.2.dr	String found in binary or memory: {"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/campaignagent.com.au\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/campaignagent.com.au\/#listItem","position":1,"item":{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/","name":"Home","description":"The leading provider in Pay Now and Pay Later solutions for vendor paid advertising. Maximise your sales potential with vendor paid advertising.","url":"https:\/\/campaignagent.com.au\/"}}]},{"@type":"Organization","@id":"https:\/\/campaignagent.com.au\/#organization","name":"CampaignAgent","url":"https:\/\/campaignagent.com.au\/","logo":{"@type":"ImageObject","url":"https:\/\/campaignagent.com.au\/UAT\/wp-content\/uploads\/2021\/11\/New-CampaignAgent-Logo-Blue-2.svg","@id":"https:\/\/campaignagent.com.au\/#organizationLogo","width":110,"height":43,"caption":"CampaignAgent"},"image":{"@id":"https:\/\/campaignagent.com.au\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/campaignagent\/","https:\/\/www.instagram.com\/campaignagent\/","https:\/\/www.linkedin.com\/company\/campaignagent\/"],"contactPoint":{"@type":"ContactPoint","telephone":"+441300882622","contactType":"Customer Support"}},{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/#webpage","url":"https:\/\/campaignagent.com.au\/","name":"CampaignAgent \/\/ Pay Now, Pay Later Real Estate","description":"The leading provider in Pay Now and Pay Later solutions for vendor paid advertising. Maximise your sales potential with vendor paid advertising.","inLanguage":"en-AU","isPartOf":{"@id":"https:\/\/campaignagent.com.au\/#website"},"breadcrumb":{"@id":"https:\/\/campaignagent.com.au\/#breadcrumblist"},"datePublished":"2022-05-24T03:18:13+10:00","dateModified":"2024-07-16T23:02:32+10:00"},{"@type":"WebSite","@id":"https:\/\/campaignagent.com.au\/#website","url":"https:\/\/campaignagent.com.au\/","name":"CampaignAgent","description":"Pay Now, Pay Later Real Estate","inLanguage":"en-AU","publisher":{"@id":"https:\/\/campaignagent.com.au\/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/campaignagent.com.au\/?s={search_term_string}"},"query-input":"required name=search_term_string"}}]} equals www.facebook.com (Facebook)
Source: chromecache_260.2.dr	String found in binary or memory: {"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/campaignagent.com.au\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/campaignagent.com.au\/#listItem","position":1,"item":{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/","name":"Home","description":"The leading provider in Pay Now and Pay Later solutions for vendor paid advertising. Maximise your sales potential with vendor paid advertising.","url":"https:\/\/campaignagent.com.au\/"}}]},{"@type":"Organization","@id":"https:\/\/campaignagent.com.au\/#organization","name":"CampaignAgent","url":"https:\/\/campaignagent.com.au\/","logo":{"@type":"ImageObject","url":"https:\/\/campaignagent.com.au\/UAT\/wp-content\/uploads\/2021\/11\/New-CampaignAgent-Logo-Blue-2.svg","@id":"https:\/\/campaignagent.com.au\/#organizationLogo","width":110,"height":43,"caption":"CampaignAgent"},"image":{"@id":"https:\/\/campaignagent.com.au\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/campaignagent\/","https:\/\/www.instagram.com\/campaignagent\/","https:\/\/www.linkedin.com\/company\/campaignagent\/"],"contactPoint":{"@type":"ContactPoint","telephone":"+441300882622","contactType":"Customer Support"}},{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/#webpage","url":"https:\/\/campaignagent.com.au\/","name":"CampaignAgent \/\/ Pay Now, Pay Later Real Estate","description":"The leading provider in Pay Now and Pay Later solutions for vendor paid advertising. Maximise your sales potential with vendor paid advertising.","inLanguage":"en-AU","isPartOf":{"@id":"https:\/\/campaignagent.com.au\/#website"},"breadcrumb":{"@id":"https:\/\/campaignagent.com.au\/#breadcrumblist"},"datePublished":"2022-05-24T03:18:13+10:00","dateModified":"2024-07-16T23:02:32+10:00"},{"@type":"WebSite","@id":"https:\/\/campaignagent.com.au\/#website","url":"https:\/\/campaignagent.com.au\/","name":"CampaignAgent","description":"Pay Now, Pay Later Real Estate","inLanguage":"en-AU","publisher":{"@id":"https:\/\/campaignagent.com.au\/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/campaignagent.com.au\/?s={search_term_string}"},"query-input":"required name=search_term_string"}}]} equals www.linkedin.com (Linkedin)
Source: chromecache_462.2.dr	String found in binary or memory: {"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/campaignagent.com.au\/legals\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/campaignagent.com.au\/#listItem","position":1,"item":{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/","name":"Home","description":"The leading provider in Pay Now and Pay Later solutions for vendor paid advertising. Maximise your sales potential with vendor paid advertising.","url":"https:\/\/campaignagent.com.au\/"},"nextItem":"https:\/\/campaignagent.com.au\/legals\/#listItem"},{"@type":"ListItem","@id":"https:\/\/campaignagent.com.au\/legals\/#listItem","position":2,"item":{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/legals\/","name":"Legals","description":"Campaign Agent Pty Ltd. ACN 608 962 812 is regulated by the Australian Securities and Investments Commission (ASIC), the Australian Competition and Consumer Commission (ACCC) and AUSTRAC.","url":"https:\/\/campaignagent.com.au\/legals\/"},"previousItem":"https:\/\/campaignagent.com.au\/#listItem"}]},{"@type":"Organization","@id":"https:\/\/campaignagent.com.au\/#organization","name":"CampaignAgent","url":"https:\/\/campaignagent.com.au\/","logo":{"@type":"ImageObject","url":"https:\/\/campaignagent.com.au\/UAT\/wp-content\/uploads\/2021\/11\/New-CampaignAgent-Logo-Blue-2.svg","@id":"https:\/\/campaignagent.com.au\/#organizationLogo","width":110,"height":43,"caption":"CampaignAgent"},"image":{"@id":"https:\/\/campaignagent.com.au\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/campaignagent\/","https:\/\/www.instagram.com\/campaignagent\/","https:\/\/www.linkedin.com\/company\/campaignagent\/"],"contactPoint":{"@type":"ContactPoint","telephone":"+441300882622","contactType":"Customer Support"}},{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/legals\/#webpage","url":"https:\/\/campaignagent.com.au\/legals\/","name":"CampaignAgent \/\/ Legals","description":"Campaign Agent Pty Ltd. ACN 608 962 812 is regulated by the Australian Securities and Investments Commission (ASIC), the Australian Competition and Consumer Commission (ACCC) and AUSTRAC.","inLanguage":"en-AU","isPartOf":{"@id":"https:\/\/campaignagent.com.au\/#website"},"breadcrumb":{"@id":"https:\/\/campaignagent.com.au\/legals\/#breadcrumblist"},"datePublished":"2023-08-22T03:54:56+10:00","dateModified":"2023-08-22T04:59:59+10:00"},{"@type":"WebSite","@id":"https:\/\/campaignagent.com.au\/#website","url":"https:\/\/campaignagent.com.au\/","name":"CampaignAgent","description":"Pay Now, Pay Later Real Estate","inLanguage":"en-AU","publisher":{"@id":"https:\/\/campaignagent.com.au\/#organization"}}]} equals www.facebook.com (Facebook)
Source: chromecache_462.2.dr	String found in binary or memory: {"@context":"https:\/\/schema.org","@graph":[{"@type":"BreadcrumbList","@id":"https:\/\/campaignagent.com.au\/legals\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/campaignagent.com.au\/#listItem","position":1,"item":{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/","name":"Home","description":"The leading provider in Pay Now and Pay Later solutions for vendor paid advertising. Maximise your sales potential with vendor paid advertising.","url":"https:\/\/campaignagent.com.au\/"},"nextItem":"https:\/\/campaignagent.com.au\/legals\/#listItem"},{"@type":"ListItem","@id":"https:\/\/campaignagent.com.au\/legals\/#listItem","position":2,"item":{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/legals\/","name":"Legals","description":"Campaign Agent Pty Ltd. ACN 608 962 812 is regulated by the Australian Securities and Investments Commission (ASIC), the Australian Competition and Consumer Commission (ACCC) and AUSTRAC.","url":"https:\/\/campaignagent.com.au\/legals\/"},"previousItem":"https:\/\/campaignagent.com.au\/#listItem"}]},{"@type":"Organization","@id":"https:\/\/campaignagent.com.au\/#organization","name":"CampaignAgent","url":"https:\/\/campaignagent.com.au\/","logo":{"@type":"ImageObject","url":"https:\/\/campaignagent.com.au\/UAT\/wp-content\/uploads\/2021\/11\/New-CampaignAgent-Logo-Blue-2.svg","@id":"https:\/\/campaignagent.com.au\/#organizationLogo","width":110,"height":43,"caption":"CampaignAgent"},"image":{"@id":"https:\/\/campaignagent.com.au\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/campaignagent\/","https:\/\/www.instagram.com\/campaignagent\/","https:\/\/www.linkedin.com\/company\/campaignagent\/"],"contactPoint":{"@type":"ContactPoint","telephone":"+441300882622","contactType":"Customer Support"}},{"@type":"WebPage","@id":"https:\/\/campaignagent.com.au\/legals\/#webpage","url":"https:\/\/campaignagent.com.au\/legals\/","name":"CampaignAgent \/\/ Legals","description":"Campaign Agent Pty Ltd. ACN 608 962 812 is regulated by the Australian Securities and Investments Commission (ASIC), the Australian Competition and Consumer Commission (ACCC) and AUSTRAC.","inLanguage":"en-AU","isPartOf":{"@id":"https:\/\/campaignagent.com.au\/#website"},"breadcrumb":{"@id":"https:\/\/campaignagent.com.au\/legals\/#breadcrumblist"},"datePublished":"2023-08-22T03:54:56+10:00","dateModified":"2023-08-22T04:59:59+10:00"},{"@type":"WebSite","@id":"https:\/\/campaignagent.com.au\/#website","url":"https:\/\/campaignagent.com.au\/","name":"CampaignAgent","description":"Pay Now, Pay Later Real Estate","inLanguage":"en-AU","publisher":{"@id":"https:\/\/campaignagent.com.au\/#organization"}}]} equals www.linkedin.com (Linkedin)
Source: chromecache_260.2.dr, chromecache_462.2.dr	String found in binary or memory: <meta property="article:publisher" content="https://www.facebook.com/campaignagent/" /> equals www.facebook.com (Facebook)
Source: chromecache_500.2.dr, chromecache_599.2.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.facebook.com (Facebook)
Source: chromecache_500.2.dr, chromecache_599.2.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.linkedin.com (Linkedin)
Source: chromecache_500.2.dr, chromecache_599.2.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.twitter.com (Twitter)
Source: chromecache_500.2.dr, chromecache_599.2.dr	String found in binary or memory: (function(a){window.ShareLink=function(b,c){var d,e={},f=function(a){var b=a.substr(0,e.classPrefixLength);return b===e.classPrefix?a.substr(e.classPrefixLength):null},g=function(a){d.on("click",function(){h(a)})},h=function(a){var b="";if(e.width&&e.height){var c=screen.width/2-e.width/2,d=screen.height/2-e.height/2;b="toolbar=0,status=0,width="+e.width+",height="+e.height+",top="+d+",left="+c}var f=ShareLink.getNetworkLink(a,e),g=/^https?:\/\//.test(f),h=g?"":"_self";open(f,h,b)},i=function(){a.each(b.classList,function(){var a=f(this);if(a)return g(a),!1})},j=function(){a.extend(e,ShareLink.defaultSettings,c),["title","text"].forEach(function(a){e[a]=e[a].replace("#","")}),e.classPrefixLength=e.classPrefix.length},k=function(){d=a(b)};(function(){j(),k(),i()})()},ShareLink.networkTemplates={twitter:"https://twitter.com/intent/tweet?text={text}\x20{url}",pinterest:"https://www.pinterest.com/pin/create/button/?url={url}&media={image}",facebook:"https://www.facebook.com/sharer.php?u={url}",vk:"https://vkontakte.ru/share.php?url={url}&title={title}&description={text}&image={image}",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url={url}&title={title}&summary={text}&source={url}",odnoklassniki:"https://connect.ok.ru/offer?url={url}&title={title}&imageUrl={image}",tumblr:"https://tumblr.com/share/link?url={url}",google:"https://plus.google.com/share?url={url}",digg:"https://digg.com/submit?url={url}",reddit:"https://reddit.com/submit?url={url}&title={title}",stumbleupon:"https://www.stumbleupon.com/submit?url={url}",pocket:"https://getpocket.com/edit?url={url}",whatsapp:"https://api.whatsapp.com/send?text={title}\n{text}\n{url}",xing:"https://www.xing.com/app/user?op=share&url={url}",print:"javascript:print()",email:"mailto:?subject={title}&body={text}\n{url}",telegram:"https://telegram.me/share/url?url={url}&text={text}",skype:"https://web.skype.com/share?url={url}"},ShareLink.defaultSettings={title:"",text:"",image:"",url:location.href,classPrefix:"s_",width:640,height:480},ShareLink.getNetworkLink=function(a,b){var c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,c){return b[c]\|\|""});if("email"===a){if(-1<b.title.indexOf("&")\|\|-1<b.text.indexOf("&")){var d={text:b.text.replace(/&/g,"%26"),title:b.title.replace(/&/g,"%26"),url:b.url};c=ShareLink.networkTemplates[a].replace(/{([^}]+)}/g,function(a,b){return d[b]})}return c.indexOf("?subject=&body")&&(c=c.replace("subject=&","")),c}return c},a.fn.shareLink=function(b){return this.each(function(){a(this).data("shareLink",new ShareLink(this,b))})}})(jQuery); equals www.vkontakte.ru (VKontakte)
Source: chromecache_495.2.dr, chromecache_543.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},rk:function(){e=pb()},zd:function(){d()}}};var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_495.2.dr, chromecache_543.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Ah:e,yh:f,zh:g,ii:k,ji:m,Qe:n,Ib:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(yD(w,"iframe_api")\|\|yD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!pD&&wD(x[A],p.Qe))return oc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_289.2.dr, chromecache_511.2.dr, chromecache_493.2.dr, chromecache_447.2.dr, chromecache_513.2.dr, chromecache_321.2.dr, chromecache_545.2.dr, chromecache_562.2.dr, chromecache_609.2.dr	String found in binary or memory: return b}lD.F="internal.enableAutoEventOnTimer";var Yb=ka(["data-gtm-yt-inspected-"]),nD=["www.youtube.com","www.youtube-nocookie.com"],oD,pD=!1; equals www.youtube.com (Youtube)
Source: chromecache_520.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_520.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_520.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_260.2.dr, chromecache_462.2.dr	String found in binary or memory: src="https://www.facebook.com/tr?id=322365152618775&ev=PageView&noscript=1" /> equals www.facebook.com (Facebook)

Source: chromecache_524.2.dr, chromecache_247.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_600.2.dr, chromecache_579.2.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_252.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_252.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_260.2.dr, chromecache_462.2.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_354.2.dr, chromecache_471.2.dr	String found in binary or memory: http://hilios.github.io/jQuery.countdown/)
Source: chromecache_412.2.dr, chromecache_379.2.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_524.2.dr, chromecache_247.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_524.2.dr, chromecache_576.2.dr, chromecache_481.2.dr, chromecache_371.2.dr, chromecache_247.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_354.2.dr, chromecache_471.2.dr	String found in binary or memory: http://masonry.desandro.com
Source: chromecache_561.2.dr, chromecache_310.2.dr	String found in binary or memory: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-f
Source: chromecache_267.2.dr, chromecache_467.2.dr	String found in binary or memory: http://momentjs.com/docs/#/displaying/
Source: chromecache_600.2.dr, chromecache_579.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_600.2.dr, chromecache_579.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_600.2.dr, chromecache_579.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_600.2.dr, chromecache_579.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_600.2.dr, chromecache_579.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_600.2.dr, chromecache_579.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_354.2.dr, chromecache_471.2.dr	String found in binary or memory: http://robert-fleischmann.de)
Source: chromecache_275.2.dr, chromecache_468.2.dr	String found in binary or memory: http://spin.js.org/#v2.3.1
Source: chromecache_600.2.dr, chromecache_579.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_381.2.dr, chromecache_292.2.dr	String found in binary or memory: http://swiperjs.com
Source: chromecache_354.2.dr, chromecache_471.2.dr	String found in binary or memory: http://tutorialzine.com/2011/09/shuffle-letters-effect-jquery/
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001008f
Source: chromecache_269.2.dr, chromecache_280.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010090
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010091
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010092
Source: chromecache_269.2.dr, chromecache_280.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010093
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010095
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010096
Source: chromecache_269.2.dr, chromecache_280.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010097
Source: chromecache_269.2.dr, chromecache_280.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000010098
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000012192
Source: chromecache_269.2.dr, chromecache_280.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000012193
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/000000000000000000013365
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9af1e4
Source: chromecache_269.2.dr, chromecache_280.2.dr, chromecache_418.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000003b9af1e5
Source: chromecache_380.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_396.2.dr, chromecache_402.2.dr, chromecache_279.2.dr, chromecache_394.2.dr	String found in binary or memory: http://www.hubspot.com
Source: chromecache_607.2.dr, chromecache_439.2.dr	String found in binary or memory: http://www.jquery-steps.com)

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/zone/	0%	URL Reputation	safe
http://gmpg.org/xfn/11	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/min-max/	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v2-DEFINITION_SUCCESS&count=1	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
http://momentjs.com/guides/#/warnings/dst-shifted/	0%	URL Reputation	safe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Reputation
forms.hsforms.com	104.19.175.188	true	false	unknown
browser.sentry-cdn.com	151.101.194.217	true	false	unknown
mandrillapp.com	15.197.175.4	true	false	unknown
js.hs-analytics.net	104.17.175.201	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	64.233.184.155	true	false	unknown
js.sentry-cdn.com	151.101.66.217	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
forms-na1.hubspot.com	104.16.117.116	true	false	unknown
track.hubspot.com	104.16.117.116	true	false	unknown
js.hsforms.net	104.18.142.119	true	false	unknown
js.hs-scripts.com	104.16.138.209	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
cdn.snapforms.com.au	18.66.122.125	true	false	unknown
campaignagent.com.au	116.90.53.2	true	false	unknown
js.hs-banner.com	104.18.40.240	true	false	unknown
star-mini.c10r.facebook.com	157.240.253.35	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
js.hsadspixel.net	104.17.128.172	true	false	unknown
forms-na1.hsforms.com	104.18.80.204	true	false	unknown
l4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com	3.233.158.26	true	false	unknown
api.hubapi.com	104.18.243.108	true	false	unknown
analytics.google.com	172.217.16.206	true	false	unknown
td.doubleclick.net	142.250.186.130	true	false	unknown
campaignagent.snapforms.com.au	52.62.6.139	true	false	unknown
widget.trustpilot.com	52.222.236.107	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
csp-report.browser-intake-datadoghq.com	unknown	unknown	false	unknown
206.23.85.13.in-addr.arpa	unknown	unknown	false	unknown
200.163.202.172.in-addr.arpa	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
kit.fontawesome.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=VpLgdn0FfoinnUFaYHX4xom1HgtalnZ%2B%2B5dJnm4YLN8NMkZCYEIPKZGy%2BIX9zNpG0vuHb%2BsKBEGiad7kbeBTblTx3jvYQRrLyOEEQt766T15YNBDws7fMd1y7GurJXTn4YVKYnpWTA%3D%3D	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/base/bootstrap.css?ver=6.2.6	false		unknown
https://cdn.snapforms.com.au/assets/lib/modernizr/js/modernizr.min.js?v=7.2.6	false		unknown
https://campaignagent.com.au/?ob=open-bridge/events	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1721777070	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/icons/iconset.css?ver=6.2.6	false		unknown
https://cdn.snapforms.com.au/assets/css/custom.css?v=7.2.6	false		unknown
https://cdn.snapforms.com.au/assets/js/app.min.js?v=7.2.6	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/master-addons/assets/js/plugins.js?ver=1.9.1	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/icons/simple-line-icons.css?ver=6.2.6	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/custom-css-js/2986.css?v=8868	false		unknown
https://campaignagent.com.au/?ob=open-bridge%2Fevents	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/base/main-style.css?ver=2.1.0	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/js/frontend/header-builder/button.js?ver=1.0.0	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2021/11/6thAnnFinTchAwards_Finalist_500px-150x150.png	false		unknown
https://js.hs-scripts.com/8551437.js?integration=WordPress&ver=10.2.1	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.6.0-dev25	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/custom-css-js/3602.css?v=1823	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/fonts/fa-brands-400.woff2	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.6.1	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=5.1.4	false		unknown
https://campaignagent.com.au/UAT/wp-includes/js/dist/i18n.min.js?ver=9e794f35a71bb98672ae	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.6.1	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.6.0-dev25	false		unknown
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v2-DEFINITION_SUCCESS&count=1	false	URL Reputation: safe	unknown
https://connect.facebook.net/en_US/fbevents.js?v=next	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/custom-css-js/3205.css?v=2231	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/custom-css-js/1189.css?v=5161	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/header-builder/text.css?ver=1.0.0	false		unknown
https://cdn.snapforms.com.au/assets/lib/jquery/js/jquery-migrate.min.js?v=7.2.6	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/custom-css-js/1371.css?v=7906	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.6.0-dev20	false		unknown
https://cdn.snapforms.com.au/assets/plugins/jquery-steps/css/main.css?v=7.2.6	false		unknown
https://campaignagent.com.au/REA_Group_logos/property-com-dark-mode.png	false		unknown
https://campaignagent.com.au/REA_Group_logos/mortgage-choice-dark-mode.png	false		unknown
https://cdn.snapforms.com.au/assets/lib/bootstrap/css/bootstrap.min.css?v=7.2.6	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/js/libraries/jquery.nicescroll.js	false		unknown
https://campaignagent.com.au/UAT/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/custom-css-js/1273.css?v=7555	false		unknown
https://cdn.snapforms.com.au/assets/js/forms/output.js?v=7.2.6	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/custom-css-js/3982.css?v=2516	false		unknown
https://js.hs-analytics.net/analytics/1730307000000/8551437.js	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.realestate.com.au	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/icons/font-awe	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://use.typekit.net/af/053fc9/00000000000000003b9af1e4/27/	chromecache_269.2.dr, chromecache_280.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementor-pro/assets/js/preloaded-elements-handl	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.mi	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_586.2.dr, chromecache_397.2.dr	false	URL Reputation: safe	unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2022/05/Fintech-Finalist-Badge-2022-1024x1021.pn	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2021/12/Ca-Agent-300x300.jpg	chromecache_260.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2021/12/CampaignAgent.jpg	chromecache_260.2.dr	false		unknown
https://use.typekit.net/af/9b05f3/000000000000000000013365/27/	chromecache_269.2.dr, chromecache_280.2.dr	false		unknown
https://stackoverflow.com/a/25776315	chromecache_431.2.dr	false		unknown
https://campaignagent.com.au/privacy-policy/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/wp-json/elementskit/v1/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_600.2.dr, chromecache_579.2.dr	false	URL Reputation: safe	unknown
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_600.2.dr, chromecache_579.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementskit-lite/libs/framework/assets/js/fronte	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2022/08/7thAnnFintechAwards_Winner_300-150x150.p	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2021/11/CA_Website_Headers_LandingPageSupportSta	chromecache_260.2.dr	false		unknown
https://www.fintechaustralia.org.au/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://use.typekit.net/af/cf3e4e/000000000000000000010095/27/	chromecache_269.2.dr, chromecache_280.2.dr	false		unknown
https://www.mortgagechoice.com.au/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2021/11/Fintech-Finalist-Badge-20211-300x300-1-1	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
http://gmpg.org/xfn/11	chromecache_260.2.dr, chromecache_462.2.dr	false	URL Reputation: safe	unknown
https://use.typekit.net/dws2ztk.css	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://proptechassociation.com.au/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://www.eldersrealestate.com.au/	chromecache_260.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/dynamic-style/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_600.2.dr, chromecache_579.2.dr	false	URL Reputation: safe	unknown
https://use.typekit.net/af/648f69/000000000000000000010098/27/	chromecache_269.2.dr, chromecache_280.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/top-10/includes/js/top-10-tracker.min.js?ver=3.3	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://www.ljhooker.com.au/	chromecache_260.2.dr	false		unknown
http://www.hubspot.com	chromecache_396.2.dr, chromecache_402.2.dr, chromecache_279.2.dr, chromecache_394.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/icons/linecons	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2022/05/Fintech-Finalist-Badge-2022-2048x2041.pn	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://js.hs-banner.com/v2	chromecache_396.2.dr, chromecache_402.2.dr	false		unknown
https://www.realcommercial.com.au	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2022/05/Proptech-Awards-2022-Badge_SCALE-UP_Effi	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://fontawesome.com/license/free	chromecache_350.2.dr, chromecache_461.2.dr, chromecache_570.2.dr, chromecache_529.2.dr	false	URL Reputation: safe	unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/icons/linea-so	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/icons/simple-l	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://use.typekit.net/af/0c71d1/000000000000000000010097/27/	chromecache_269.2.dr, chromecache_280.2.dr	false		unknown
https://campaignagent.com.au/depositpay/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://www.marshallwhite.com.au	chromecache_260.2.dr	false		unknown
https://fintechawards.net	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://github.com/getsentry/sentry-javascript	chromecache_290.2.dr, chromecache_370.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/plugins/smart-slider-3/Public/SmartSlider3/Widget/Bullet	chromecache_260.2.dr	false		unknown
https://www.smartline.com.au/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://campaignagent.com.au/UAT/wp-content/uploads/2021/12/Ca-Agent-650x650.jpg	chromecache_260.2.dr	false		unknown
https://www.kollosche.com.au/	chromecache_260.2.dr	false		unknown
https://www.ocre.com.au	chromecache_260.2.dr	false		unknown
https://www.fintechaustralia.org.au/fintech-australia-announces-2022-finnies-finalists/	chromecache_260.2.dr, chromecache_462.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_382.2.dr, chromecache_255.2.dr	false	URL Reputation: safe	unknown
https://au.trustpilot.com/evaluate/campaignagent.com.au	chromecache_516.2.dr, chromecache_539.2.dr	false		unknown
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_600.2.dr, chromecache_579.2.dr	false	URL Reputation: safe	unknown
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_600.2.dr, chromecache_579.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
52.222.236.107	widget.trustpilot.com	United States	16509	AMAZON-02US	false
116.90.53.2	campaignagent.com.au	Australia	55803	DIGITALPACIFIC-AUDigitalPacificPtyLtdAustraliaAU	false
3.233.158.26	l4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.16.139.209	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.40.240	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
52.222.236.60	unknown	United States	16509	AMAZON-02US	false
104.16.138.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.66.217	js.sentry-cdn.com	United States	54113	FASTLYUS	false
54.153.160.36	unknown	United States	16509	AMAZON-02US	false
52.62.6.139	campaignagent.snapforms.com.au	United States	16509	AMAZON-02US	false
104.17.128.172	js.hsadspixel.net	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
104.18.80.204	forms-na1.hsforms.com	United States	13335	CLOUDFLARENETUS	false
104.17.175.201	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.18.142.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false
104.19.175.188	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.243.108	api.hubapi.com	United States	13335	CLOUDFLARENETUS	false
64.233.184.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.122.125	cdn.snapforms.com.au	United States	3	MIT-GATEWAYSUS	false
151.101.194.217	browser.sentry-cdn.com	United States	54113	FASTLYUS	false
18.66.122.39	unknown	United States	3	MIT-GATEWAYSUS	false
15.197.175.4	mandrillapp.com	United States	7430	TANDEMUS	false
172.217.16.206	analytics.google.com	United States	15169	GOOGLEUS	false
157.240.251.9	unknown	United States	32934	FACEBOOKUS	false
151.101.2.217	unknown	United States	54113	FASTLYUS	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
104.16.117.116	forms-na1.hubspot.com	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545594
Start date and time:	2024-10-30 17:48:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mandrillapp.com/track/click/30927070/campaignagent.com.au?p=eyJzIjoibjZvUGt3cG1JWjg3YlU2enA4UWJpRWhQR3Q0IiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2NhbXBhaWduYWdlbnQuY29tLmF1XFxcL2xlZ2Fsc1xcXC9cIixcImlkXCI6XCJiNGU0NTg1ZGEyNzY0M2QyOGJmZDAwYjJkODUzYTAxZlwiLFwidXJsX2lkc1wiOltcIjg3NWRlNWViZTBmZWJjYzM4ZDExOTNhYzhlOWFkYzM4YmE4MmRmNWNcIl19In0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@20/613@78/33
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:49:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982489345511931
Encrypted:	false
SSDEEP:	48:8TdVT9ZjFHsidAKZdA19ehwiZUklqehwy+3:8jvjITy
MD5:	D26E0ED2A6BD9A5F668DF9179B4F0127
SHA1:	76D1EDA2B4EFECAE64764E8357B2B9650A1212FC
SHA-256:	45EC4251977F4D9D674ED8CD50F64A22ACD91BE4A533550204DA92A42A787BEF
SHA-512:	C4BF695825135341933B5A6AF0BA7307AC2BB170BBC00D5368F71B73344795772BF3EBF8812D25BE779AF22B6FFEF71130DB37F1CB9A8A6CD5033A910739A179
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y9.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y9.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y9.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y9............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y;............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........b..x.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 17:49:53.922696114 CET	192.168.2.5	1.1.1.1	0xbbe1	Standard query (0)	mandrillapp.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:53.922960997 CET	192.168.2.5	1.1.1.1	0x62ec	Standard query (0)	mandrillapp.com	65	IN (0x0001)	false
Oct 30, 2024 17:49:54.872754097 CET	192.168.2.5	1.1.1.1	0xeb83	Standard query (0)	campaignagent.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:54.873203993 CET	192.168.2.5	1.1.1.1	0xc410	Standard query (0)	campaignagent.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:49:56.530932903 CET	192.168.2.5	1.1.1.1	0xe99c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:56.531136990 CET	192.168.2.5	1.1.1.1	0xbf48	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:49:58.677903891 CET	192.168.2.5	1.1.1.1	0x12b9	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:58.678306103 CET	192.168.2.5	1.1.1.1	0xafe5	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Oct 30, 2024 17:49:58.679116964 CET	192.168.2.5	1.1.1.1	0xc300	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:58.679229021 CET	192.168.2.5	1.1.1.1	0xb099	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Oct 30, 2024 17:50:00.325788975 CET	192.168.2.5	1.1.1.1	0x5d95	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:00.325987101 CET	192.168.2.5	1.1.1.1	0xc819	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Oct 30, 2024 17:50:00.745104074 CET	192.168.2.5	1.1.1.1	0x7697	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:00.745290041 CET	192.168.2.5	1.1.1.1	0x94c0	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Oct 30, 2024 17:50:18.299839020 CET	192.168.2.5	1.1.1.1	0x13f8	Standard query (0)	campaignagent.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:18.302932978 CET	192.168.2.5	1.1.1.1	0x8cc	Standard query (0)	campaignagent.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:50:18.323057890 CET	192.168.2.5	1.1.1.1	0x41c5	Standard query (0)	campaignagent.snapforms.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:18.323412895 CET	192.168.2.5	1.1.1.1	0x9649	Standard query (0)	campaignagent.snapforms.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:50:18.324213982 CET	192.168.2.5	1.1.1.1	0x3b1e	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:18.324472904 CET	192.168.2.5	1.1.1.1	0x54ae	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Oct 30, 2024 17:50:20.199460983 CET	192.168.2.5	1.1.1.1	0x7cda	Standard query (0)	kit.fontawesome.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.199913025 CET	192.168.2.5	1.1.1.1	0x8b36	Standard query (0)	kit.fontawesome.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:20.281855106 CET	192.168.2.5	1.1.1.1	0xfb2d	Standard query (0)	campaignagent.snapforms.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.282217026 CET	192.168.2.5	1.1.1.1	0xfea7	Standard query (0)	campaignagent.snapforms.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:50:20.283055067 CET	192.168.2.5	1.1.1.1	0xdfd8	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.283474922 CET	192.168.2.5	1.1.1.1	0xb6d7	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:20.372422934 CET	192.168.2.5	1.1.1.1	0x82a7	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.372705936 CET	192.168.2.5	1.1.1.1	0xc30a	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Oct 30, 2024 17:50:20.375382900 CET	192.168.2.5	1.1.1.1	0xb79d	Standard query (0)	campaignagent.snapforms.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.375596046 CET	192.168.2.5	1.1.1.1	0xc1e1	Standard query (0)	campaignagent.snapforms.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:50:21.294502020 CET	192.168.2.5	1.1.1.1	0xcc22	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:21.294696093 CET	192.168.2.5	1.1.1.1	0x2d1b	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:23.045893908 CET	192.168.2.5	1.1.1.1	0x5a04	Standard query (0)	cdn.snapforms.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.046602964 CET	192.168.2.5	1.1.1.1	0xd3f4	Standard query (0)	cdn.snapforms.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:50:23.053505898 CET	192.168.2.5	1.1.1.1	0xfa0d	Standard query (0)	js.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.054241896 CET	192.168.2.5	1.1.1.1	0x2cb2	Standard query (0)	js.sentry-cdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:23.268402100 CET	192.168.2.5	1.1.1.1	0xb8f8	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.268569946 CET	192.168.2.5	1.1.1.1	0x5b7b	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:23.363759995 CET	192.168.2.5	1.1.1.1	0x29fc	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.364018917 CET	192.168.2.5	1.1.1.1	0x6aca	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 30, 2024 17:50:24.169926882 CET	192.168.2.5	1.1.1.1	0xfc01	Standard query (0)	206.23.85.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 30, 2024 17:50:24.468467951 CET	192.168.2.5	1.1.1.1	0xa5a	Standard query (0)	js.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.468838930 CET	192.168.2.5	1.1.1.1	0x3970	Standard query (0)	js.sentry-cdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:24.749708891 CET	192.168.2.5	1.1.1.1	0x8ec4	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.749927044 CET	192.168.2.5	1.1.1.1	0x786d	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:26.200032949 CET	192.168.2.5	1.1.1.1	0x24eb	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.200176954 CET	192.168.2.5	1.1.1.1	0xacd3	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 30, 2024 17:50:26.607600927 CET	192.168.2.5	1.1.1.1	0xaeee	Standard query (0)	200.163.202.172.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 30, 2024 17:50:26.699454069 CET	192.168.2.5	1.1.1.1	0x8604	Standard query (0)	cdn.snapforms.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.699454069 CET	192.168.2.5	1.1.1.1	0x4dba	Standard query (0)	cdn.snapforms.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:50:26.760776997 CET	192.168.2.5	1.1.1.1	0x16cd	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.761220932 CET	192.168.2.5	1.1.1.1	0x8644	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:26.827099085 CET	192.168.2.5	1.1.1.1	0x7415	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.828218937 CET	192.168.2.5	1.1.1.1	0xad1b	Standard query (0)	widget.trustpilot.com	65	IN (0x0001)	false
Oct 30, 2024 17:50:27.706320047 CET	192.168.2.5	1.1.1.1	0xf8a0	Standard query (0)	campaignagent.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.186570883 CET	192.168.2.5	1.1.1.1	0x50bf	Standard query (0)	cdn.snapforms.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.189452887 CET	192.168.2.5	1.1.1.1	0x366a	Standard query (0)	campaignagent.snapforms.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.193537951 CET	192.168.2.5	1.1.1.1	0x51f0	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.495206118 CET	192.168.2.5	1.1.1.1	0xff13	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:29.718049049 CET	192.168.2.5	1.1.1.1	0x2413	Standard query (0)	js.hsadspixel.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.233014107 CET	192.168.2.5	1.1.1.1	0xbd89	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.809801102 CET	192.168.2.5	1.1.1.1	0x3c7	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.863570929 CET	192.168.2.5	1.1.1.1	0x7141	Standard query (0)	browser.sentry-cdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:32.211816072 CET	192.168.2.5	1.1.1.1	0xf9fb	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:33.567800999 CET	192.168.2.5	1.1.1.1	0xef3f	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:35.822813988 CET	192.168.2.5	1.1.1.1	0x4bc	Standard query (0)	csp-report.browser-intake-datadoghq.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:36.526000023 CET	192.168.2.5	1.1.1.1	0x98ff	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.070909977 CET	192.168.2.5	1.1.1.1	0x260b	Standard query (0)	widget.trustpilot.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.072566032 CET	192.168.2.5	1.1.1.1	0xa5b6	Standard query (0)	api.hubapi.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.576683998 CET	192.168.2.5	1.1.1.1	0x98a2	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.799896002 CET	192.168.2.5	1.1.1.1	0x4b0	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:38.422251940 CET	192.168.2.5	1.1.1.1	0x8748	Standard query (0)	forms-na1.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:39.242537975 CET	192.168.2.5	1.1.1.1	0x1ebb	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.760371923 CET	192.168.2.5	1.1.1.1	0x5301	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.790179968 CET	192.168.2.5	1.1.1.1	0x4ec5	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.791399002 CET	192.168.2.5	1.1.1.1	0x6b52	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:44.347106934 CET	192.168.2.5	1.1.1.1	0xd5c	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:56.582511902 CET	192.168.2.5	1.1.1.1	0xc3db	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 17:49:53.930514097 CET	1.1.1.1	192.168.2.5	0xbbe1	No error (0)	mandrillapp.com		15.197.175.4	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:53.930514097 CET	1.1.1.1	192.168.2.5	0xbbe1	No error (0)	mandrillapp.com		76.223.125.47	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:54.891737938 CET	1.1.1.1	192.168.2.5	0xeb83	No error (0)	campaignagent.com.au		116.90.53.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:56.544970036 CET	1.1.1.1	192.168.2.5	0xe99c	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:56.545734882 CET	1.1.1.1	192.168.2.5	0xbf48	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 17:49:58.685760021 CET	1.1.1.1	192.168.2.5	0x12b9	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:58.685760021 CET	1.1.1.1	192.168.2.5	0x12b9	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:58.685760021 CET	1.1.1.1	192.168.2.5	0x12b9	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:58.685760021 CET	1.1.1.1	192.168.2.5	0x12b9	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:58.685760021 CET	1.1.1.1	192.168.2.5	0x12b9	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:49:58.686747074 CET	1.1.1.1	192.168.2.5	0xc300	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:49:58.686757088 CET	1.1.1.1	192.168.2.5	0xb099	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:49:58.688121080 CET	1.1.1.1	192.168.2.5	0xafe5	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Oct 30, 2024 17:50:00.333205938 CET	1.1.1.1	192.168.2.5	0xc819	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:00.334395885 CET	1.1.1.1	192.168.2.5	0x5d95	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:00.752974987 CET	1.1.1.1	192.168.2.5	0x7697	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:00.753437996 CET	1.1.1.1	192.168.2.5	0x94c0	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:08.196705103 CET	1.1.1.1	192.168.2.5	0x3f1b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:08.196705103 CET	1.1.1.1	192.168.2.5	0x3f1b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:08.931077003 CET	1.1.1.1	192.168.2.5	0xf93d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:08.931077003 CET	1.1.1.1	192.168.2.5	0xf93d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:18.325078964 CET	1.1.1.1	192.168.2.5	0x13f8	No error (0)	campaignagent.com.au		116.90.53.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:18.332004070 CET	1.1.1.1	192.168.2.5	0x3b1e	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:18.332004070 CET	1.1.1.1	192.168.2.5	0x3b1e	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:18.333762884 CET	1.1.1.1	192.168.2.5	0x54ae	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Oct 30, 2024 17:50:18.343058109 CET	1.1.1.1	192.168.2.5	0x41c5	No error (0)	campaignagent.snapforms.com.au		52.62.6.139	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:18.343058109 CET	1.1.1.1	192.168.2.5	0x41c5	No error (0)	campaignagent.snapforms.com.au		54.153.160.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.207127094 CET	1.1.1.1	192.168.2.5	0x7cda	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:20.208113909 CET	1.1.1.1	192.168.2.5	0x8b36	No error (0)	kit.fontawesome.com	kit.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:20.290782928 CET	1.1.1.1	192.168.2.5	0xb6d7	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Oct 30, 2024 17:50:20.292625904 CET	1.1.1.1	192.168.2.5	0xdfd8	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.292625904 CET	1.1.1.1	192.168.2.5	0xdfd8	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.380642891 CET	1.1.1.1	192.168.2.5	0x82a7	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.380642891 CET	1.1.1.1	192.168.2.5	0x82a7	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.380919933 CET	1.1.1.1	192.168.2.5	0xc30a	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Oct 30, 2024 17:50:20.392950058 CET	1.1.1.1	192.168.2.5	0xb79d	No error (0)	campaignagent.snapforms.com.au		52.62.6.139	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.392950058 CET	1.1.1.1	192.168.2.5	0xb79d	No error (0)	campaignagent.snapforms.com.au		54.153.160.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.417247057 CET	1.1.1.1	192.168.2.5	0xfb2d	No error (0)	campaignagent.snapforms.com.au		52.62.6.139	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:20.417247057 CET	1.1.1.1	192.168.2.5	0xfb2d	No error (0)	campaignagent.snapforms.com.au		54.153.160.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:21.302167892 CET	1.1.1.1	192.168.2.5	0xcc22	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:21.302167892 CET	1.1.1.1	192.168.2.5	0xcc22	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:21.303607941 CET	1.1.1.1	192.168.2.5	0x2d1b	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Oct 30, 2024 17:50:22.929611921 CET	1.1.1.1	192.168.2.5	0xfff9	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:22.929611921 CET	1.1.1.1	192.168.2.5	0xfff9	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.071199894 CET	1.1.1.1	192.168.2.5	0xfa0d	No error (0)	js.sentry-cdn.com		151.101.66.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.071199894 CET	1.1.1.1	192.168.2.5	0xfa0d	No error (0)	js.sentry-cdn.com		151.101.130.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.071199894 CET	1.1.1.1	192.168.2.5	0xfa0d	No error (0)	js.sentry-cdn.com		151.101.2.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.071199894 CET	1.1.1.1	192.168.2.5	0xfa0d	No error (0)	js.sentry-cdn.com		151.101.194.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.232906103 CET	1.1.1.1	192.168.2.5	0x5a04	No error (0)	cdn.snapforms.com.au		18.66.122.125	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.232906103 CET	1.1.1.1	192.168.2.5	0x5a04	No error (0)	cdn.snapforms.com.au		18.66.122.39	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.232906103 CET	1.1.1.1	192.168.2.5	0x5a04	No error (0)	cdn.snapforms.com.au		18.66.122.20	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.232906103 CET	1.1.1.1	192.168.2.5	0x5a04	No error (0)	cdn.snapforms.com.au		18.66.122.80	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.286458015 CET	1.1.1.1	192.168.2.5	0xb8f8	No error (0)	analytics.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:23.286483049 CET	1.1.1.1	192.168.2.5	0x5b7b	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:23.382051945 CET	1.1.1.1	192.168.2.5	0x29fc	No error (0)	td.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.195611000 CET	1.1.1.1	192.168.2.5	0xfc01	Name error (3)	206.23.85.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 30, 2024 17:50:24.493314028 CET	1.1.1.1	192.168.2.5	0xa5a	No error (0)	js.sentry-cdn.com		151.101.2.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.493314028 CET	1.1.1.1	192.168.2.5	0xa5a	No error (0)	js.sentry-cdn.com		151.101.130.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.493314028 CET	1.1.1.1	192.168.2.5	0xa5a	No error (0)	js.sentry-cdn.com		151.101.194.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.493314028 CET	1.1.1.1	192.168.2.5	0xa5a	No error (0)	js.sentry-cdn.com		151.101.66.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.760034084 CET	1.1.1.1	192.168.2.5	0x8ec4	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.760034084 CET	1.1.1.1	192.168.2.5	0x8ec4	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.760034084 CET	1.1.1.1	192.168.2.5	0x8ec4	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:24.760034084 CET	1.1.1.1	192.168.2.5	0x8ec4	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.207690001 CET	1.1.1.1	192.168.2.5	0x24eb	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:26.207690001 CET	1.1.1.1	192.168.2.5	0x24eb	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.207861900 CET	1.1.1.1	192.168.2.5	0xacd3	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:26.207861900 CET	1.1.1.1	192.168.2.5	0xacd3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 30, 2024 17:50:26.207861900 CET	1.1.1.1	192.168.2.5	0xacd3	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 30, 2024 17:50:26.615228891 CET	1.1.1.1	192.168.2.5	0xaeee	Name error (3)	200.163.202.172.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 30, 2024 17:50:26.721776962 CET	1.1.1.1	192.168.2.5	0x8604	No error (0)	cdn.snapforms.com.au		18.66.122.39	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.721776962 CET	1.1.1.1	192.168.2.5	0x8604	No error (0)	cdn.snapforms.com.au		18.66.122.20	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.721776962 CET	1.1.1.1	192.168.2.5	0x8604	No error (0)	cdn.snapforms.com.au		18.66.122.125	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.721776962 CET	1.1.1.1	192.168.2.5	0x8604	No error (0)	cdn.snapforms.com.au		18.66.122.80	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.768832922 CET	1.1.1.1	192.168.2.5	0x16cd	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.768832922 CET	1.1.1.1	192.168.2.5	0x16cd	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.768832922 CET	1.1.1.1	192.168.2.5	0x16cd	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.768832922 CET	1.1.1.1	192.168.2.5	0x16cd	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.768832922 CET	1.1.1.1	192.168.2.5	0x16cd	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.770382881 CET	1.1.1.1	192.168.2.5	0x8644	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Oct 30, 2024 17:50:26.835016012 CET	1.1.1.1	192.168.2.5	0x7415	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.835016012 CET	1.1.1.1	192.168.2.5	0x7415	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.835016012 CET	1.1.1.1	192.168.2.5	0x7415	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:26.835016012 CET	1.1.1.1	192.168.2.5	0x7415	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:27.874181986 CET	1.1.1.1	192.168.2.5	0xf8a0	No error (0)	campaignagent.com.au		116.90.53.2	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.416529894 CET	1.1.1.1	192.168.2.5	0x51f0	No error (0)	js.hs-banner.com		104.18.40.240	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.416529894 CET	1.1.1.1	192.168.2.5	0x51f0	No error (0)	js.hs-banner.com		172.64.147.16	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.503271103 CET	1.1.1.1	192.168.2.5	0xff13	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:28.503271103 CET	1.1.1.1	192.168.2.5	0xff13	No error (0)	scontent.xx.fbcdn.net		157.240.251.9	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.567084074 CET	1.1.1.1	192.168.2.5	0x50bf	No error (0)	cdn.snapforms.com.au		18.66.122.39	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.567084074 CET	1.1.1.1	192.168.2.5	0x50bf	No error (0)	cdn.snapforms.com.au		18.66.122.80	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.567084074 CET	1.1.1.1	192.168.2.5	0x50bf	No error (0)	cdn.snapforms.com.au		18.66.122.20	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.567084074 CET	1.1.1.1	192.168.2.5	0x50bf	No error (0)	cdn.snapforms.com.au		18.66.122.125	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.567096949 CET	1.1.1.1	192.168.2.5	0x366a	No error (0)	campaignagent.snapforms.com.au		54.153.160.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:28.567096949 CET	1.1.1.1	192.168.2.5	0x366a	No error (0)	campaignagent.snapforms.com.au		52.62.6.139	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:29.725853920 CET	1.1.1.1	192.168.2.5	0x2413	No error (0)	js.hsadspixel.net		104.17.128.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:29.725853920 CET	1.1.1.1	192.168.2.5	0x2413	No error (0)	js.hsadspixel.net		104.17.223.152	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.241138935 CET	1.1.1.1	192.168.2.5	0xbd89	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.241138935 CET	1.1.1.1	192.168.2.5	0xbd89	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.818300962 CET	1.1.1.1	192.168.2.5	0x3c7	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:30.871083021 CET	1.1.1.1	192.168.2.5	0x7141	No error (0)	browser.sentry-cdn.com		151.101.194.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.871083021 CET	1.1.1.1	192.168.2.5	0x7141	No error (0)	browser.sentry-cdn.com		151.101.66.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.871083021 CET	1.1.1.1	192.168.2.5	0x7141	No error (0)	browser.sentry-cdn.com		151.101.130.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:30.871083021 CET	1.1.1.1	192.168.2.5	0x7141	No error (0)	browser.sentry-cdn.com		151.101.2.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:32.219454050 CET	1.1.1.1	192.168.2.5	0xf9fb	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:32.219454050 CET	1.1.1.1	192.168.2.5	0xf9fb	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:33.576105118 CET	1.1.1.1	192.168.2.5	0xef3f	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:35.849827051 CET	1.1.1.1	192.168.2.5	0x4bc	No error (0)	csp-report.browser-intake-datadoghq.com	l4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:35.849827051 CET	1.1.1.1	192.168.2.5	0x4bc	No error (0)	l4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com		3.233.158.26	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:35.849827051 CET	1.1.1.1	192.168.2.5	0x4bc	No error (0)	l4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com		3.233.158.24	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:35.849827051 CET	1.1.1.1	192.168.2.5	0x4bc	No error (0)	l4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com		3.233.158.25	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:36.550658941 CET	1.1.1.1	192.168.2.5	0x98ff	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:36.550658941 CET	1.1.1.1	192.168.2.5	0x98ff	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.105413914 CET	1.1.1.1	192.168.2.5	0x260b	No error (0)	widget.trustpilot.com		52.222.236.107	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.105413914 CET	1.1.1.1	192.168.2.5	0x260b	No error (0)	widget.trustpilot.com		52.222.236.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.105413914 CET	1.1.1.1	192.168.2.5	0x260b	No error (0)	widget.trustpilot.com		52.222.236.94	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.105413914 CET	1.1.1.1	192.168.2.5	0x260b	No error (0)	widget.trustpilot.com		52.222.236.71	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.106214046 CET	1.1.1.1	192.168.2.5	0xa5b6	No error (0)	api.hubapi.com		104.18.243.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.106214046 CET	1.1.1.1	192.168.2.5	0xa5b6	No error (0)	api.hubapi.com		104.18.244.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.106214046 CET	1.1.1.1	192.168.2.5	0xa5b6	No error (0)	api.hubapi.com		104.18.240.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.106214046 CET	1.1.1.1	192.168.2.5	0xa5b6	No error (0)	api.hubapi.com		104.18.241.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.106214046 CET	1.1.1.1	192.168.2.5	0xa5b6	No error (0)	api.hubapi.com		104.18.242.108	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:37.584605932 CET	1.1.1.1	192.168.2.5	0x98a2	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:37.808598042 CET	1.1.1.1	192.168.2.5	0x4b0	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:37.808598042 CET	1.1.1.1	192.168.2.5	0x4b0	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:38.429658890 CET	1.1.1.1	192.168.2.5	0x8748	No error (0)	forms-na1.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:38.429658890 CET	1.1.1.1	192.168.2.5	0x8748	No error (0)	forms-na1.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:39.250168085 CET	1.1.1.1	192.168.2.5	0x1ebb	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.768465996 CET	1.1.1.1	192.168.2.5	0x5301	No error (0)	forms-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.768465996 CET	1.1.1.1	192.168.2.5	0x5301	No error (0)	forms-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.797787905 CET	1.1.1.1	192.168.2.5	0x4ec5	No error (0)	stats.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.797787905 CET	1.1.1.1	192.168.2.5	0x4ec5	No error (0)	stats.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.797787905 CET	1.1.1.1	192.168.2.5	0x4ec5	No error (0)	stats.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.797787905 CET	1.1.1.1	192.168.2.5	0x4ec5	No error (0)	stats.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:41.799438000 CET	1.1.1.1	192.168.2.5	0x6b52	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:50:44.355899096 CET	1.1.1.1	192.168.2.5	0xd5c	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:44.355899096 CET	1.1.1.1	192.168.2.5	0xd5c	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:50:56.590409040 CET	1.1.1.1	192.168.2.5	0xc3db	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:49:54 UTC	1017	OUT	GET /track/click/30927070/campaignagent.com.au?p=eyJzIjoibjZvUGt3cG1JWjg3YlU2enA4UWJpRWhQR3Q0IiwidiI6MSwicCI6IntcInVcIjozMDkyNzA3MCxcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2NhbXBhaWduYWdlbnQuY29tLmF1XFxcL2xlZ2Fsc1xcXC9cIixcImlkXCI6XCJiNGU0NTg1ZGEyNzY0M2QyOGJmZDAwYjJkODUzYTAxZlwiLFwidXJsX2lkc1wiOltcIjg3NWRlNWViZTBmZWJjYzM4ZDExOTNhYzhlOWFkYzM4YmE4MmRmNWNcIl19In0 HTTP/1.1 Host: mandrillapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:49:54 UTC	542	IN	HTTP/1.1 302 Found Date: Wed, 30 Oct 2024 16:49:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx Set-Cookie: PHPSESSID=rk9ofvchlnpvk897dsmtbj970v; expires=Thu, 31 Oct 2024 02:49:54 GMT; Max-Age=36000; path=/; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=rk9ofvchlnpvk897dsmtbj970v; path=/; secure; HttpOnly; SameSite=Strict Location: https://campaignagent.com.au/legals/
2024-10-30 16:49:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:49:56 UTC	670	OUT	GET /legals/ HTTP/1.1 Host: campaignagent.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:49:58 UTC	623	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/7.4.33 content-type: text/html; charset=UTF-8 link: <https://campaignagent.com.au/wp-json/>; rel="https://api.w.org/" link: <https://campaignagent.com.au/wp-json/wp/v2/pages/6665>; rel="alternate"; type="application/json" link: <https://campaignagent.com.au/?p=6665>; rel=shortlink transfer-encoding: chunked date: Wed, 30 Oct 2024 16:49:58 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-30 16:49:58 UTC	745	IN	Data Raw: 31 30 30 30 30 0d 0a 09 09 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 09 09 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 41 55 22 0a 09 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 20 3e 0d 0a 09 09 3c 68 65 61 64 3e 0d 0a 09 09 09 0d 0a 09 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 09 09 09 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 09 09 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 Data Ascii: 10000<!DOCTYPE html><html dir="ltr" lang="en-AU"prefix="og: https://ogp.me/ns#" ><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><link rel="profile" h
2024-10-30 16:49:58 UTC	14994	IN	Data Raw: 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 41 6c 6c 20 69 6e 20 4f 6e 65 20 53 45 4f 20 28 41 49 4f 53 45 4f 29 20 34 2e 34 2e 34 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 5f 55 53 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 43 61 6d 70 61 69 67 6e 41 67 65 6e 74 20 2f 2f 20 50 61 79 20 4e 6f 77 2c 20 50 61 79 20 4c 61 74 65 72 20 52 65 61 6c 20 45 73 74 61 74 65 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 Data Ascii: me="generator" content="All in One SEO (AIOSEO) 4.4.4" /><meta property="og:locale" content="en_US" /><meta property="og:site_name" content="CampaignAgent // Pay Now, Pay Later Real Estate" /><meta property="og:type" content="article" /><meta
2024-10-30 16:49:58 UTC	16384	IN	Data Raw: 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6c 61 72 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 78 2d 6c 61 72 67 65 2d 66 6f 6e 74 2d 73 69 7a 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 78 2d 6c 61 72 67 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 20 61 3a 77 68 65 72 65 28 3a 6e 6f 74 28 2e 77 70 2d 65 6c 65 6d 65 6e 74 2d 62 75 74 74 6f 6e 29 29 7b 63 6f Data Ascii: --font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;}.wp-block-navigation a:where(:not(.wp-element-button)){co
2024-10-30 16:49:58 UTC	16384	IN	Data Raw: 65 6e 74 65 72 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 61 5f 73 77 69 6e 67 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 61 5f 73 77 69 6e 67 7d 2e 68 61 5f 73 6c 69 64 65 49 6e 44 6f 77 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 61 5f 73 6c 69 64 65 49 6e 44 6f 77 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 61 5f 73 6c 69 64 65 49 6e 44 6f 77 6e 7d 2e 68 61 5f 73 6c 69 64 65 49 6e 55 70 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 68 61 5f 73 6c 69 64 65 49 6e 55 70 Data Ascii: enter;-ms-transform-origin:top center;transform-origin:top center;-webkit-animation-name:ha_swing;animation-name:ha_swing}.ha_slideInDown{-webkit-animation-name:ha_slideInDown;animation-name:ha_slideInDown}.ha_slideInUp{-webkit-animation-name:ha_slideInUp
2024-10-30 16:49:58 UTC	16384	IN	Data Raw: 65 61 73 65 20 66 69 6c 6c 20 6f 75 74 20 76 61 6c 69 64 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 22 7d 3b 0a 76 61 72 20 61 6a 61 78 5f 73 69 62 5f 66 72 6f 6e 74 5f 6f 62 6a 65 63 74 20 3d 20 7b 22 61 6a 61 78 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 61 6d 70 61 69 67 6e 61 67 65 6e 74 2e 63 6f 6d 2e 61 75 5c 2f 55 41 54 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 64 6d 69 6e 2d 61 6a 61 78 2e 70 68 70 22 2c 22 61 6a 61 78 5f 6e 6f 6e 63 65 22 3a 22 61 62 34 39 30 64 66 37 61 64 22 2c 22 66 6c 61 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 61 6d 70 61 69 67 6e 61 67 65 6e 74 2e 63 6f 6d 2e 61 75 5c 2f 55 41 54 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 70 6c 75 67 69 6e 73 5c 2f 6d 61 69 6c 69 6e 5c 2f 69 6d 67 5c 2f 66 6c 61 67 73 5c Data Ascii: ease fill out valid phone number"};var ajax_sib_front_object = {"ajax_url":"https:\/\/campaignagent.com.au\/UAT\/wp-admin\/admin-ajax.php","ajax_nonce":"ab490df7ad","flag_url":"https:\/\/campaignagent.com.au\/UAT\/wp-content\/plugins\/mailin\/img\/flags\
2024-10-30 16:49:58 UTC	654	IN	Data Raw: 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 68 62 2d 73 63 72 65 65 6e 2d 76 69 65 77 20 77 68 62 2d 6d 6f 62 69 6c 65 73 2d 76 69 65 77 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 68 62 2d 61 72 65 61 20 77 68 62 2d 72 6f 77 31 2d 61 72 65 61 20 77 68 62 2d 63 6f 6e 74 65 6e 74 2d 74 6f 70 20 63 61 4e 41 56 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 68 62 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 68 62 2d 63 6f 6c 20 77 68 62 2d 6c 65 66 74 2d 63 6f 6c 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 61 6d 70 61 69 67 6e 61 67 65 6e 74 2e 63 6f 6d 2e 61 75 2f 22 20 63 6c 61 73 73 3d 22 77 68 62 2d Data Ascii: ></div></div><div class="whb-screen-view whb-mobiles-view"><div class="whb-area whb-row1-area whb-content-top caNAV"><div class="container"><div class="whb-content-wrap"><div class="whb-col whb-left-col"><a href="https://campaignagent.com.au/" class="whb-
2024-10-30 16:49:58 UTC	16384	IN	Data Raw: 31 30 30 30 30 0d 0a 6e 65 22 20 69 64 3d 22 77 68 62 2d 68 61 6d 62 75 72 67 65 72 2d 6d 65 6e 75 2d 31 36 33 36 37 39 33 35 37 35 35 37 36 22 3e 0d 0a 09 09 3c 61 20 68 72 65 66 3d 22 23 22 20 69 64 3d 22 77 6e 2d 68 61 6d 62 75 72 67 65 72 2d 69 63 6f 6e 22 20 63 6c 61 73 73 3d 22 77 68 62 2d 69 63 6f 6e 2d 65 6c 65 6d 65 6e 74 20 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 68 63 6f 6c 6f 72 66 20 68 61 6d 62 75 72 67 65 72 2d 6f 70 2d 69 63 6f 6e 22 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 61 6d 62 75 72 67 65 72 2d 69 63 6f 6e 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 61 6d 62 75 72 67 65 72 2d 69 63 6f 6e 2d 74 6f 70 22 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 61 6d 62 75 72 67 65 Data Ascii: 10000ne" id="whb-hamburger-menu-1636793575576"><a href="#" id="wn-hamburger-icon" class="whb-icon-element close-button hcolorf hamburger-op-icon"><div class="hamburger-icon"><div class="hamburger-icon-top"></div><div class="hamburge
2024-10-30 16:49:58 UTC	16384	IN	Data Raw: 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 37 31 39 63 30 65 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 37 30 70 78 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 36 30 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 37 31 39 63 30 65 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 63 74 73 2d 65 6c 65 6d 65 6e 74 2d 74 79 70 65 2d 62 61 63 6b 67 72 6f 75 6e 64 29 2c 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 33 36 30 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 34 37 31 39 Data Ascii: ementor-element.elementor-element-4719c0e > .elementor-container{max-width:1170px;}.elementor-360 .elementor-element.elementor-element-4719c0e:not(.elementor-motion-effects-element-type-background), .elementor-360 .elementor-element.elementor-element-4719
2024-10-30 16:49:58 UTC	16384	IN	Data Raw: 70 6c 6f 61 64 73 2f 32 30 32 32 2f 30 35 2f 46 69 6e 74 65 63 68 2d 46 69 6e 61 6c 69 73 74 2d 42 61 64 67 65 2d 32 30 32 32 2d 37 36 38 78 37 36 35 2e 70 6e 67 20 37 36 38 77 2c 20 68 74 74 70 73 3a 2f 2f 63 61 6d 70 61 69 67 6e 61 67 65 6e 74 2e 63 6f 6d 2e 61 75 2f 55 41 54 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 32 2f 30 35 2f 46 69 6e 74 65 63 68 2d 46 69 6e 61 6c 69 73 74 2d 42 61 64 67 65 2d 32 30 32 32 2d 31 35 33 36 78 31 35 33 31 2e 70 6e 67 20 31 35 33 36 77 2c 20 68 74 74 70 73 3a 2f 2f 63 61 6d 70 61 69 67 6e 61 67 65 6e 74 2e 63 6f 6d 2e 61 75 2f 55 41 54 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 32 2f 30 35 2f 46 69 6e 74 65 63 68 2d 46 69 6e 61 6c 69 73 74 2d 42 61 64 67 65 2d 32 30 Data Ascii: ploads/2022/05/Fintech-Finalist-Badge-2022-768x765.png 768w, https://campaignagent.com.au/UAT/wp-content/uploads/2022/05/Fintech-Finalist-Badge-2022-1536x1531.png 1536w, https://campaignagent.com.au/UAT/wp-content/uploads/2022/05/Fintech-Finalist-Badge-20
2024-10-30 16:49:58 UTC	16384	IN	Data Raw: 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 70 61 63 65 72 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 73 70 61 63 65 72 2d 69 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 33 31 66 37 35 62 37 20 6a 6c 74 6d 61 2d 67 6c 61 73 73 2d 65 66 66 65 63 74 2d 6e 6f 20 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 20 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 Data Ascii: ="elementor-widget-container"><div class="elementor-spacer"><div class="elementor-spacer-inner"></div></div></div></div><div class="elementor-element elementor-element-31f75b7 jltma-glass-effect-no elementor-widget elementor-wi

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:49:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 16:49:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=258944 Date: Wed, 30 Oct 2024 16:49:58 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:49:59 UTC	625	OUT	GET /UAT/wp-content/plugins/jeg-elementor-kit/assets/css/elements/main.css?ver=2.4.2 HTTP/1.1 Host: campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://campaignagent.com.au/legals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:50:00 UTC	485	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 06 Nov 2024 16:49:59 GMT content-type: text/css last-modified: Tue, 07 Jun 2022 00:34:15 GMT accept-ranges: bytes content-length: 185911 date: Wed, 30 Oct 2024 16:49:59 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 61 63 63 6f 72 64 69 6f 6e 7b 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 6a 6b 69 74 4e 75 6d 62 65 72 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 63 61 72 64 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 63 61 72 64 2d 77 72 61 70 70 65 72 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 6a 65 67 2d 65 6c 65 6d 65 Data Ascii: .jeg-elementor-kit.jkit-accordion{counter-reset:jkitNumber}.jeg-elementor-kit.jkit-accordion .card-wrapper{background-color:transparent;border:0;border-radius:0}.jeg-elementor-kit.jkit-accordion .card-wrapper:not(:last-child){margin-bottom:10px}.jeg-eleme
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 75 70 2d 6f 75 74 20 2e 36 73 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6a 6b 69 74 2d 61 6e 69 6d 61 74 65 64 2d 73 6c 69 64 65 2d 75 70 2d 6f 75 74 20 2e 36 73 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 61 6e 69 6d 61 74 65 64 2d 74 65 78 74 5b 64 61 74 61 2d 73 74 79 6c 65 3d 72 6f 74 61 74 69 6e 67 5d 5b 64 61 74 61 2d 72 6f 74 61 74 65 3d 73 6c 69 64 65 2d 64 6f 77 6e 5d 20 2e 61 6e 69 6d 61 74 65 64 2d 74 65 78 74 20 2e 64 79 6e 61 6d 69 63 2d 77 72 61 70 70 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 33 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 77 69 64 74 68 20 2e 33 73 20 65 61 73 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 Data Ascii: up-out .6s;animation:jkit-animated-slide-up-out .6s}.jeg-elementor-kit.jkit-animated-text[data-style=rotating][data-rotate=slide-down] .animated-text .dynamic-wrapper{-webkit-transition:width .3s ease;transition:width .3s ease;overflow:hidden}.jeg-element
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6a 6b 69 74 2d 65 6c 65 6d 65 6e 74 2d 62 67 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 66 65 61 74 75 72 65 2d 6c 69 73 74 20 2e 66 65 61 74 75 72 65 2d 6c 69 73 74 2d 69 74 65 6d 73 20 2e 66 65 61 74 75 72 65 2d 6c 69 73 74 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 63 6f 6e 6e 65 63 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 66 65 61 74 75 72 65 2d 6c 69 73 74 20 Data Ascii: olor:var(--jkit-element-bg-color);border-width:1px;-webkit-transition:all .5s ease;transition:all .5s ease}.jeg-elementor-kit.jkit-feature-list .feature-list-items .feature-list-item:last-child .connector{display:none}.jeg-elementor-kit.jkit-feature-list
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 69 6c 6c 3a 76 61 72 28 2d 2d 6a 6b 69 74 2d 62 67 2d 63 6f 6c 6f 72 29 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 68 65 61 64 69 6e 67 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 68 65 61 64 69 6e 67 2e 74 69 74 6c 65 2d 66 6c 6f 61 74 2d 6c 65 66 74 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 Data Ascii: ill:var(--jkit-bg-color)}.jeg-elementor-kit.jkit-heading{position:relative}.jeg-elementor-kit.jkit-heading.title-float-left{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center}.jeg-element
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6a 6b 69 74 2d 73 75 63 63 65 73 73 2d 62 67 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 6a 6b 69 74 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 2d 66 72 6f 6d 2d 6c 65 66 74 7b 30 25 7b 6c 65 66 74 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 31 30 31 25 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 2d 66 72 6f 6d 2d 6c 65 66 74 7b 30 25 7b 6c 65 66 74 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 31 30 31 25 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 2d 66 72 6f 6d 2d 72 69 67 Data Ascii: success-border-color);background-color:var(--jkit-success-bg-color);border:var(--jkit-success-border-color)}@-webkit-keyframes slide-from-left{0%{left:0}100%{left:101%}}@keyframes slide-from-left{0%{left:0}100%{left:101%}}@-webkit-keyframes slide-from-rig
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6a 6b 69 74 2d 73 65 61 72 63 68 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 34 29 20 74 72 61 6e 73 6c 61 74 65 59 28 33 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 34 29 20 74 72 61 6e 73 6c 61 74 65 Data Ascii: %{opacity:1;-webkit-transform:scale(2) translateY(0);transform:scale(2) translateY(0);height:100%;padding-bottom:0;border-radius:0}}@keyframes jkit-search-background{0%{opacity:0;-webkit-transform:scale(.04) translateY(300%);transform:scale(.04) translate
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 2d 6d 65 6e 75 20 2e 6a 6b 69 74 2d 6d 65 6e 75 2d 77 72 61 70 70 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 6e 61 76 2d 6d 65 6e 75 20 2e 6a 6b 69 74 2d 6d 65 6e 75 2d 77 72 61 70 70 65 72 20 2e 6a 6b 69 74 2d 6e 61 76 2d 69 64 65 6e 74 69 74 79 2d 70 61 6e 65 6c 20 2e 6a 6b 69 74 2d 6e 61 76 2d 73 69 74 65 2d 74 69 74 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 6e 61 76 2d 6d 65 6e 75 20 2e 6a 6b 69 74 2d 6d 65 6e 75 2d 77 72 61 70 70 65 72 20 2e 6a 6b 69 74 2d 6e 61 76 2d 69 64 65 6e 74 69 74 79 2d 70 61 6e 65 6c 20 2e 6a 6b 69 74 2d 6e 61 76 2d 73 69 74 65 2d 74 69 74 6c 65 20 2e 6a 6b 69 74 2d 6e 61 Data Ascii: -menu .jkit-menu-wrapper{z-index:1000}.jeg-elementor-kit.jkit-nav-menu .jkit-menu-wrapper .jkit-nav-identity-panel .jkit-nav-site-title{display:none}.jeg-elementor-kit.jkit-nav-menu .jkit-menu-wrapper .jkit-nav-identity-panel .jkit-nav-site-title .jkit-na
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 34 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 70 6f 72 74 66 6f 6c 69 6f 2d 67 61 6c 6c 65 72 79 20 2e 72 6f 77 2d 69 74 65 6d 2d 69 6e 66 6f 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 34 73 3b 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: 00;letter-spacing:4px;text-transform:uppercase;margin-bottom:10px}.jeg-elementor-kit.jkit-portfolio-gallery .row-item-info:after{content:'';position:absolute;top:0;left:0;width:100%;height:0;background:#fff;z-index:-1;-webkit-transition:all .4s;transition
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 69 64 64 6c 65 20 2e 74 6e 73 2d 63 6f 6e 74 72 6f 6c 73 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 63 6f 6e 74 72 6f 6c 73 3d 70 72 65 76 5d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6a 6b 69 74 2d 74 78 74 2d 63 6f 6c 6f 72 29 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6a 65 67 2d 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2e 6a 6b 69 74 2d 70 72 6f 64 75 63 74 2d 63 61 72 6f 75 73 65 6c 2e 61 72 72 6f 77 2d 62 6f 74 74 6f 6d 2d 65 64 67 65 20 2e 74 6e 73 2d 63 6f 6e 74 72 6f 6c 73 20 62 75 74 74 6f 6e 5b 64 61 74 61 2d 63 6f 6e 74 72 6f 6c 73 3d 6e 65 78 74 5d 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 Data Ascii: iddle .tns-controls button[data-controls=prev]{color:var(--jkit-txt-color);display:inline-block;margin:0;padding:0}.jeg-elementor-kit.jkit-product-carousel.arrow-bottom-edge .tns-controls button[data-controls=next]{display:inline-block;position:absolute;r
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 69 6e 73 65 74 20 30 20 32 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 2d 6f 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 2d 31 2e 32 31 36 70 78 20 36 2e 38 39 34 70 78 20 31 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 37 29 2c 69 6e 73 65 74 20 30 20 32 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 2d 31 2e 32 31 36 70 78 20 36 2e 38 39 34 70 78 20 31 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 37 29 2c 69 6e 73 65 74 20 30 20 32 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 6a 6b 69 74 2d 74 Data Ascii: inset 0 2px 3px 0 rgba(0,0,0,.2);-o-box-shadow:-1.216px 6.894px 15px 0 rgba(0,0,0,.07),inset 0 2px 3px 0 rgba(0,0,0,.2);box-shadow:-1.216px 6.894px 15px 0 rgba(0,0,0,.07),inset 0 2px 3px 0 rgba(0,0,0,.2);background-color:#fff;border:1px solid var(--jkit-t

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:49:59 UTC	608	OUT	GET /UAT/wp-includes/css/dist/block-library/style.min.css?ver=6.2.6 HTTP/1.1 Host: campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://campaignagent.com.au/legals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:50:00 UTC	484	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 06 Nov 2024 16:49:59 GMT content-type: text/css last-modified: Fri, 04 Aug 2023 01:26:47 GMT accept-ranges: bytes content-length: 97517 date: Wed, 30 Oct 2024 16:49:59 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 75 64 69 6f 20 66 69 67 63 61 70 74 69 6f Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaptio
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 31 30 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 31 30 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 Data Ascii: 100 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-100 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-100:not(.has-background-gradient):before,.wp-block-cover.has-b
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 63 28 33 33 2e 33 33 33 33 33 25 20 2d 20 2e 36 36 36 36 37 65 6d 29 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 34 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 2c 2e 77 70 2d Data Ascii: c(33.33333% - .66667em)}.blocks-gallery-grid:not(.has-nested-images).columns-4 .blocks-gallery-image,.blocks-gallery-grid:not(.has-nested-images).columns-4 .blocks-gallery-item,.wp-block-gallery:not(.has-nested-images).columns-4 .blocks-gallery-image,.wp-
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 6b 2d 6d 65 64 69 61 2d 74 65 78 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 5f 5f 6d 65 64 69 61 7b 0a 20 20 2f 2a 21 72 74 6c 3a 62 65 67 69 6e 3a 69 67 6e 6f 72 65 2a 2f 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 31 3b 67 72 69 64 2d 72 6f 77 3a 31 3b 0a 20 20 2f 2a 21 72 74 6c 3a 65 6e 64 3a 69 67 6e 6f 72 65 2a 2f 6d 61 72 67 69 6e 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 6d 65 64 69 61 2d 74 65 78 74 5f 5f 63 6f 6e 74 65 6e 74 7b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 0a 20 20 2f 2a 21 72 74 6c 3a 62 65 67 69 6e 3a 69 67 6e 6f 72 65 2a 2f 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 67 72 69 64 2d 72 6f 77 3a 31 3b 0a 20 20 2f 2a 21 72 74 6c 3a 65 6e 64 3a 69 67 6e 6f 72 65 Data Ascii: k-media-text .wp-block-media-text__media{ /!rtl:begin:ignore/grid-column:1;grid-row:1; /!rtl:end:ignore/margin:0}.wp-block-media-text .wp-block-media-text__content{direction:ltr; /!rtl:begin:ignore/grid-column:2;grid-row:1; /*!rtl:end:ignore
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 6c 77 61 79 73 2d 73 68 6f 77 6e 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 6f 73 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 6f 73 65 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 63 6c 6f 73 65 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: lways-shown){display:none}}.wp-block-navigation__responsive-container-close{position:absolute;right:0;top:0;z-index:2}.wp-block-navigation__responsive-container-close.wp-block-navigation__responsive-container-close.wp-block-navigation__responsive-containe
2024-10-30 16:50:00 UTC	15597	IN	Data Raw: 2d 64 72 6f 70 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 32 38 30 66 66 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 65 74 73 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 35 38 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 73 3a 6e 6f 74 28 2e 69 73 2d 73 74 79 6c 65 2d 6c 6f 67 6f 73 2d 6f 6e 6c 79 29 20 2e 77 70 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 2d 66 61 63 65 62 6f 6f 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 37 38 66 32 3b 63 6f 6c 6f 72 Data Ascii: -dropbox{background-color:#4280ff;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-link-etsy{background-color:#f45800;color:#fff}.wp-block-social-links:not(.is-style-logos-only) .wp-social-link-facebook{background-color:#1778f2;color

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:49:59 UTC	598	OUT	GET /UAT/wp-includes/css/classic-themes.min.css?ver=6.2.6 HTTP/1.1 Host: campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://campaignagent.com.au/legals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:50:00 UTC	482	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 06 Nov 2024 16:49:59 GMT content-type: text/css last-modified: Fri, 04 Aug 2023 01:26:48 GMT accept-ranges: bytes content-length: 291 date: Wed, 30 Oct 2024 16:49:59 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-30 16:50:00 UTC	291	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 37 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 66 69 6c 65 5f 5f 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 32 33 Data Ascii: /! This file is auto-generated /.wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#323

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:49:59 UTC	646	OUT	GET /UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/header-builder/header-builder.css?ver=1.0.0 HTTP/1.1 Host: campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://campaignagent.com.au/legals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:50:00 UTC	484	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 06 Nov 2024 16:49:59 GMT content-type: text/css last-modified: Wed, 02 Feb 2022 12:07:26 GMT accept-ranges: bytes content-length: 18718 date: Wed, 30 Oct 2024 16:49:59 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-30 16:50:00 UTC	16384	IN	Data Raw: 2e 77 68 62 2d 63 6f 6e 74 65 6e 74 2d 77 72 61 70 2c 2e 77 68 62 2d 77 72 61 70 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 77 65 62 6e 75 73 2d 68 65 61 64 65 72 2d 62 75 69 6c 64 65 72 20 2e 77 68 62 2d 61 72 65 61 20 2e 6e 6f 2d 70 61 64 64 69 6e 67 2c 23 77 65 62 6e 75 73 2d 68 65 61 64 65 72 2d 62 75 69 6c 64 65 72 20 2e 77 68 62 2d 61 72 65 61 2e 6e 6f 2d 70 61 64 64 69 6e 67 2c 2e 77 68 62 2d 77 72 61 70 20 2e 77 68 62 2d 61 72 65 61 2e 77 68 62 2d 76 65 72 74 69 63 61 6c 2e 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 76 65 72 74 69 63 61 6c 2d 63 6f 6e 74 61 63 74 2d 69 63 6f 6e 3a 68 6f 76 65 72 20 69 2c 2e 76 65 72 74 69 63 61 6c 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 69 Data Ascii: .whb-content-wrap,.whb-wrap{width:100%}#webnus-header-builder .whb-area .no-padding,#webnus-header-builder .whb-area.no-padding,.whb-wrap .whb-area.whb-vertical.container{padding-left:0;padding-right:0}.vertical-contact-icon:hover i,.vertical-fullscreen-i
2024-10-30 16:50:00 UTC	2334	IN	Data Raw: 61 74 69 6f 6e 2c 2e 77 68 62 2d 68 65 61 64 65 72 2d 64 72 6f 70 64 6f 77 6e 2c 2e 77 68 69 74 65 2d 70 6f 70 75 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 77 68 62 2d 74 6f 6f 6c 74 69 70 5b 64 61 74 61 2d 74 6f 6f 6c 74 69 70 5d 3a 68 6f 76 65 72 3a 61 66 74 65 72 2c 2e 77 68 62 2d 74 6f 6f 6c 74 69 70 5b 64 61 74 61 2d 74 6f 6f 6c 74 69 70 5d 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 6f 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 77 68 62 2d 74 6f 6f 6c 74 69 70 2e 74 6f 6f 6c 74 69 70 2d 6f 6e 2d 74 6f 70 5b 64 61 74 61 2d 74 6f 6f 6c 74 69 70 5d 3a 61 66 74 65 72 7b 62 6f 74 74 6f 6d 3a 69 6e 68 65 72 69 74 3b 74 6f 70 3a 32 70 78 7d 2e 77 2d 61 64 64 2d 65 6c 65 6d 65 6e 74 2e 77 68 62 Data Ascii: ation,.whb-header-dropdown,.white-popup{position:relative}.whb-tooltip[data-tooltip]:hover:after,.whb-tooltip[data-tooltip]:hover:before{opacity:1;visibility:visible}.whb-tooltip.tooltip-on-top[data-tooltip]:after{bottom:inherit;top:2px}.w-add-element.whb

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:50:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 16:50:00 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25931 Date: Wed, 30 Oct 2024 16:50:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 16:50:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:50:01 UTC	638	OUT	GET /UAT/wp-content/plugins/deepcore/assets/dist/css/frontend/header-builder/button.css?ver=1.0.0 HTTP/1.1 Host: campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://campaignagent.com.au/legals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:50:01 UTC	482	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 06 Nov 2024 16:50:01 GMT content-type: text/css last-modified: Wed, 02 Feb 2022 12:07:25 GMT accept-ranges: bytes content-length: 348 date: Wed, 30 Oct 2024 16:50:01 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-30 16:50:01 UTC	348	IN	Data Raw: 2e 77 68 62 2d 62 75 74 74 6f 6e 20 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 33 37 64 66 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 33 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 2e 74 72 61 6e 73 70 61 72 65 6e 74 2d 68 65 61 64 65 72 2d 77 2e 74 2d 64 61 72 6b 2d 77 20 23 77 72 61 70 20 2e 77 68 62 2d 63 6f 6c 20 73 70 Data Ascii: .whb-button a{background-color:#437df9;color:#fff;font-size:14px;font-weight:400;white-space:nowrap;text-align:center;-moz-transition:all .2s ease;transition:all .2s ease;padding:10px 30px;border-radius:2px}.transparent-header-w.t-dark-w #wrap .whb-col sp

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:50:01 UTC	624	OUT	GET /UAT/wp-content/plugins/reading-progress-bar/public/css/rp-public.css?ver=6.2.6 HTTP/1.1 Host: campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://campaignagent.com.au/legals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:50:01 UTC	482	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 06 Nov 2024 16:50:01 GMT content-type: text/css last-modified: Wed, 02 Feb 2022 11:49:36 GMT accept-ranges: bytes content-length: 257 date: Wed, 30 Oct 2024 16:50:01 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-30 16:50:01 UTC	257	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 50 75 62 6c 69 63 20 43 53 53 20 72 75 6c 65 73 0a 20 2a 2f 0a 2e 72 65 61 64 69 6e 67 50 72 6f 67 72 65 73 73 62 61 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 39 3b 0a 09 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 09 61 70 70 65 61 72 61 6e 63 65 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b Data Ascii: /** * Public CSS rules */.readingProgressbar {display: none;position: fixed;left: 0;bottom: 0;width: 100%;z-index: 9999999;-webkit-appearance: none;-moz-appearance: none;appearance: none;border: none;background-color: transparent;

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:50:01 UTC	627	OUT	GET /UAT/wp-content/plugins/simple-urls/admin/assets/css/lasso-lite.css?ver=1691112631 HTTP/1.1 Host: campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://campaignagent.com.au/legals/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:50:01 UTC	484	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 06 Nov 2024 16:50:01 GMT content-type: text/css last-modified: Fri, 04 Aug 2023 01:30:31 GMT accept-ranges: bytes content-length: 14385 date: Wed, 30 Oct 2024 16:50:01 GMT server: LiteSpeed vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-10-30 16:50:01 UTC	14385	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 09 46 4c 45 58 42 4f 58 20 53 45 54 55 50 20 26 20 52 45 53 45 54 53 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 6c 61 73 73 6f 2d 6c 69 74 65 2e 6c 61 73 73 6f 2d 63 6f 6e 74 61 69 6e 65 72 20 2a 20 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 2e 6c 61 73 73 6f 2d 6c 69 74 65 2e 6c 61 73 73 6f 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 63 6f 6c 6f 72 3a 20 69 6e 69 74 69 61 6c 3b 7d 0a Data Ascii: /*******************************************************FLEXBOX SETUP & RESETS******************************************************/.lasso-lite.lasso-container {box-sizing: border-box !important;}.lasso-lite.lasso-container {color: initial;}