Edit tour

Windows Analysis Report
https://atuiqe.com/so/99PC8OXJg/c?w=QkhD4F_29qlP63xGZtdrzJ7YP7_meHXlHcBWS8oSJek.eyJ1IjoiaHR0cHM6Ly93d3cuYXR1aXFlLmNvbS8iLCJtIjoibWFpbCIsImMiOiJhNmQ4NTViMi04ODFjLTQ4ZDItYmIwMC0wYzNhZGEyOTdhNTYifQ

Overview

General Information

Sample URL:	https://atuiqe.com/so/99PC8OXJg/c?w=QkhD4F_29qlP63xGZtdrzJ7YP7_meHXlHcBWS8oSJek.eyJ1IjoiaHR0cHM6Ly93d3cuYXR1aXFlLmNvbS8iLCJtIjoibWFpbCIsImMiOiJhNmQ4NTViMi04ODFjLTQ4ZDItYmIwMC0wYzNhZGEyOTdhNTYifQ
Analysis ID:	1552387
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious URL

Phishing site detected (based on image similarity)

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2216,i,12206933346504614371,102233952212044085,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://atuiqe.com/so/99PC8OXJg/c?w=QkhD4F_29qlP63xGZtdrzJ7YP7_meHXlHcBWS8oSJek.eyJ1IjoiaHR0cHM6Ly93d3cuYXR1aXFlLmNvbS8iLCJtIjoibWFpbCIsImMiOiJhNmQ4NTViMi04ODFjLTQ4ZDItYmIwMC0wYzNhZGEyOTdhNTYifQ" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-08T17:43:09.632704+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	49894	52.204.161.98	443	TCP
2024-11-08T17:43:23.205774+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50127	52.204.161.98	443	TCP

HTTP traffic detected: POST /api/v1/bulklog HTTP/1.1Host: panorama.wixapps.netConnection: keep-aliveContent-Length: 524sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://www.atuiqe.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.atuiqe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56	HTTP Parser: No <meta name="author".. found
Source: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56	HTTP Parser: No <meta name="author".. found
Source: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56	HTTP Parser: No <meta name="author".. found
Source: https://www.atuiqe.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.atuiqe.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.atuiqe.com/	HTTP Parser: No <meta name="author".. found
Source: https://www.atuiqe.com/	HTTP Parser: No <meta name="author".. found

Source: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56	HTTP Parser: No <meta name="copyright".. found
Source: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56	HTTP Parser: No <meta name="copyright".. found
Source: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56	HTTP Parser: No <meta name="copyright".. found
Source: https://www.atuiqe.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.atuiqe.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.atuiqe.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.atuiqe.com/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50100 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50136 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50101 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50193 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:50195 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:49894 -> 52.204.161.98:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50127 -> 52.204.161.98:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: atuiqe.com
Source: global traffic	DNS traffic detected: DNS query: www.atuiqe.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static.parastorage.com
Source: global traffic	DNS traffic detected: DNS query: static.wixstatic.com
Source: global traffic	DNS traffic detected: DNS query: frog.wix.com
Source: global traffic	DNS traffic detected: DNS query: panorama.wixapps.net
Source: global traffic	DNS traffic detected: DNS query: siteassets.parastorage.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2216,i,12206933346504614371,102233952212044085,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://atuiqe.com/so/99PC8OXJg/c?w=QkhD4F_29qlP63xGZtdrzJ7YP7_meHXlHcBWS8oSJek.eyJ1IjoiaHR0cHM6Ly93d3cuYXR1aXFlLmNvbS8iLCJtIjoibWFpbCIsImMiOiJhNmQ4NTViMi04ODFjLTQ4ZDItYmIwMC0wYzNhZGEyOTdhNTYifQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 --field-trial-handle=2216,i,12206933346504614371,102233952212044085,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Email	JoeBoxAI: AI detected Typosquatting in URL: URL: https://atuiqe.com
Source: Email	JoeBoxAI: AI detected Brand spoofing attempt in URL: URL: https://www.atuiqe.com
Source: Email	JoeBoxAI: AI detected Typosquatting in URL: URL: https://www.atuiqe.com

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_304.2.dr, chromecache_457.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_516.2.dr, chromecache_301.2.dr	String found in binary or memory: https://api.whatsapp.com/send?phone=
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: https://bo.wix.com/suricate/
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: https://browser.sentry-cdn.com/6.18.2/bundle.min.js
Source: chromecache_286.2.dr, chromecache_299.2.dr, chromecache_560.2.dr, chromecache_450.2.dr	String found in binary or memory: https://greensock.com
Source: chromecache_286.2.dr, chromecache_299.2.dr, chromecache_560.2.dr, chromecache_450.2.dr	String found in binary or memory: https://greensock.com/standard-license
Source: chromecache_304.2.dr, chromecache_457.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_304.2.dr, chromecache_457.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_304.2.dr, chromecache_457.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_304.2.dr, chromecache_457.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: https://polyfill-fastly.io/v3/polyfill.min.js?features=fetch
Source: chromecache_322.2.dr, chromecache_374.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: https://schema.org/
Source: chromecache_555.2.dr	String found in binary or memory: https://siteassets.parastorage.com/pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21
Source: chromecache_555.2.dr	String found in binary or memory: https://static.parastorage.com/client/pfavico.ico
Source: chromecache_318.2.dr, chromecache_271.2.dr	String found in binary or memory: https://static.parastorage.com/services/auto-frontend-modules/dist/webworker/auto-frontend-modules.6
Source: chromecache_248.2.dr, chromecache_390.2.dr, chromecache_407.2.dr, chromecache_365.2.dr	String found in binary or memory: https://static.parastorage.com/services/editor-elements-design-systems/dist/thunderbolt/
Source: chromecache_552.2.dr, chromecache_364.2.dr, chromecache_485.2.dr, chromecache_290.2.dr, chromecache_331.2.dr, chromecache_392.2.dr, chromecache_283.2.dr, chromecache_266.2.dr, chromecache_262.2.dr, chromecache_258.2.dr, chromecache_556.2.dr, chromecache_539.2.dr, chromecache_527.2.dr, chromecache_408.2.dr, chromecache_338.2.dr, chromecache_394.2.dr	String found in binary or memory: https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid
Source: chromecache_375.2.dr, chromecache_289.2.dr, chromecache_410.2.dr, chromecache_385.2.dr	String found in binary or memory: https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid_bootstra
Source: chromecache_456.2.dr, chromecache_492.2.dr	String found in binary or memory: https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid_forms.76
Source: chromecache_393.2.dr, chromecache_551.2.dr	String found in binary or memory: https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid~core.619
Source: chromecache_366.2.dr, chromecache_414.2.dr	String found in binary or memory: https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid~core.ae8
Source: chromecache_381.2.dr, chromecache_288.2.dr, chromecache_510.2.dr, chromecache_487.2.dr, chromecache_355.2.dr, chromecache_367.2.dr, chromecache_272.2.dr, chromecache_315.2.dr, chromecache_550.2.dr, chromecache_524.2.dr, chromecache_396.2.dr, chromecache_269.2.dr, chromecache_415.2.dr, chromecache_293.2.dr, chromecache_498.2.dr, chromecache_319.2.dr, chromecache_413.2.dr, chromecache_428.2.dr, chromecache_507.2.dr, chromecache_333.2.dr, chromecache_476.2.dr	String found in binary or memory: https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbol
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: https://static.parastorage.com/services/profile-card-tpa-ooi/1.2548.0/ProfileCardViewerWidget.min.cs
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: https://static.parastorage.com/services/tag-manager-client/1.875.0/siteTags.bundle.min.js
Source: chromecache_359.2.dr, chromecache_235.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/9839.bb61fb83.chunk.min.js.map
Source: chromecache_525.2.dr, chromecache_453.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/9839.f7183e67.chunk.min.js.map
Source: chromecache_357.2.dr, chromecache_474.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/animations.0c47ed2a.chunk.min.js.map
Source: chromecache_311.2.dr, chromecache_484.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/animationsWixCodeSdk.0f7330c1.chunk.min
Source: chromecache_490.2.dr, chromecache_448.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/assetsLoader.a89ec09e.chunk.min.js.map
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/bi-common.inline.809b56ee.bundle.min.js
Source: chromecache_314.2.dr, chromecache_555.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/bi.inline.b203996e.bundle.min.js.map
Source: chromecache_555.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/browser-deprecation.bundle.es5.js
Source: chromecache_314.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/browser-deprecation.inline.a0050e0e.bun
Source: chromecache_251.2.dr, chromecache_236.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/componentsLoader.2a47460a.chunk.min.js.
Source: chromecache_555.2.dr	String found in binary or memory: https://static.parastorage.com/services/wix-thunderbolt/dist/createPlatformWorker.inline.64e2d04b.bu

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://www.atuiqe.com/profile/	0%	Avira URL Cloud	safe
https://www.atuiqe.com/_partials/wix-thunderbolt/dist/clientWorker.935122cc.bundle.min.js	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
glb-editor.wix.com	34.149.206.255	true	false	high
td-static-34-49-229-81.parastorage.com	34.49.229.81	true	false	unknown
d1cq301dpr7fww.cloudfront.net	18.66.27.76	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
atuiqe.com	185.230.63.171	true	true	unknown
www.google.com	142.250.185.100	true	false	high
td-ccm-neg-87-45.wixdns.net	34.149.87.45	true	false	high
bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com	52.204.161.98	true	false	high
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	84.201.210.35	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
windowsupdatebg.s.llnwi.net	87.248.204.0	true	false	high
www.atuiqe.com	unknown	unknown	true	unknown
static.wixstatic.com	unknown	unknown	false	high
siteassets.parastorage.com	unknown	unknown	false	high
frog.wix.com	unknown	unknown	false	high
panorama.wixapps.net	unknown	unknown	false	high
static.parastorage.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid[VectorImage].4ab31c20.bundle.min.js	false		high
https://static.parastorage.com/fonts/v2/e3cf8f7e-35c4-446f-9b93-de93e989f66f/v1/lulo-clean-w01-one-bold.woff2	false		high
https://static.wixstatic.com/media/18d56f_13d17583d954426aa1dbb7724a14911f~mv2.png/v1/fill/w_72,h_72,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/18d56f_13d17583d954426aa1dbb7724a14911f~mv2.png	false		high
https://static.parastorage.com/services/santa-members-viewer-app/1.2613.0/viewerScript.bundle.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/platformPubsub.236f41ee.chunk.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_2.04ea19cd.chunk.min.js	false		high
https://static.parastorage.com/services/editor-elements/1.12908.0/rb_dsgnsys.corvid.manifest.min.json	false		high
https://static.wixstatic.com/media/8313eaa436ec4c2b902185a775fc9388.jpg/v1/fill/w_1263,h_907,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/8313eaa436ec4c2b902185a775fc9388.jpg	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_22.c72c096c.chunk.min.js	false		high
https://static.parastorage.com/services/auto-frontend-modules/dist/webworker/auto-frontend-modules.68dbdc1c.umd.min.js	false		high
https://www.atuiqe.com/_partials/wix-thunderbolt/dist/clientWorker.935122cc.bundle.min.js	false	Avira URL Cloud: safe	unknown
https://static.wixstatic.com/media/18d56f_e04fdc01f0d34687b8ca7a2119d19b74~mv2.png/v1/fill/w_158,h_40,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/18d56f_e04fdc01f0d34687b8ca7a2119d19b74~mv2.png	false		high
https://frog.wix.com/bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=1&is_company_network=false&is_sav_rollout=0&is_dac_rollout=0&dc=42&microPop=fastly_g&is_cached=true&msid=be3cee66-68c7-4d21-be77-bbeaecbd3fc9&session_id=d22feca8-f53f-4553-aee7-7db0b533136f&ish=false&isb=false&vsi=bfe20fbc-a298-489a-b13d-68419aee2b1f&caching=hit,hit_hit&pv=visible&pn=1&v=1.14753.0&url=https%3A%2F%2Fwww.atuiqe.com%2F&st=2&ts=329&tsn=1336&platformOnSite=true	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/tslib.inline.4901af4a.chunk.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/panorama.051dc072.chunk.min.js	false		high
https://static.parastorage.com/services/editor-elements/1.12908.0/rb_dsgnsys.thunderbolt.manifest.min.json	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_23.3eeabd9c.chunk.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_6.3c440389.chunk.min.js	false		high
https://static.parastorage.com/services/auto-frontend-modules/1.6238.0/webworker/manifest-worker.min.json	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/tpaCommons.1b788520.chunk.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/reporter-api.b56a03fd.chunk.min.js	false		high
https://static.wixstatic.com/media/8313eaa436ec4c2b902185a775fc9388.jpg/v1/fill/w_147,h_98,al_c,q_80,usm_0.66_1.00_0.01,blur_2,enc_auto/8313eaa436ec4c2b902185a775fc9388.jpg	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/main.317ed945.bundle.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/environmentWixCodeSdk.7690a40b.chunk.min.js	false		high
https://static.parastorage.com/fonts/v2/8eac109b-0fa9-42bf-a305-43e471e23779/v1/helvetica-w01-light.woff2	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt[FormContainer_FormContainerSkin].187e21cd.bundle.min.js	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt[LoginSocialBar].7ce54179.bundle.min.js	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt[WPhoto_RoundPhoto].7c86b4ef.bundle.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/protectedPages.0014c834.chunk.min.js	false		high
https://static.wixstatic.com/media/18d56f_e196088879e04c2d80c6d94ead05b7ea~mv2.png/v1/fill/w_95,h_59,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/18d56f_e196088879e04c2d80c6d94ead05b7ea~mv2.png	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt_bootstrap-classic.90c4294a.bundle.min.js	false		high
https://static.wixstatic.com/media/18d56f_13d17583d954426aa1dbb7724a14911f~mv2.png/v1/fill/w_72,h_72,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/18d56f_13d17583d954426aa1dbb7724a14911f~mv2.png	false		high
https://static.wixstatic.com/media/18d56f_ca85e4b5c81d4d478b1f291525dc5d49~mv2.png/v1/fill/w_150,h_47,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/18d56f_ca85e4b5c81d4d478b1f291525dc5d49~mv2.png	false		high
https://static.wixstatic.com/media/18d56f_1b856b762ce649668fb9f81520cbf31e~mv2.png/v1/fill/w_107,h_59,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Skylit%20text%20trans_edited.png	false		high
https://static.parastorage.com/services/editor-elements/1.12952.0/rb_wixui.thunderbolt.manifest.min.json	false		high
https://static.wixstatic.com/media/18d56f_b7290eebc71e442ea4fcf76a78745784~mv2.png/v1/fill/w_135,h_59,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/EIDFEST_edited_edited_edited.png	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_0.6a56df09.chunk.min.js	false		high
https://static.wixstatic.com/media/18d56f_3d2d9bc4506c45c3b082633a71c8c539~mv2.png/v1/fill/w_75,h_68,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/18d56f_3d2d9bc4506c45c3b082633a71c8c539~mv2.png	false		high
https://static.parastorage.com/services/forms-viewer/9b1d5a24f4d5eb8918c79ff097b3218838c889af86c27b3fc52d6428/assets/locales/messages_en.json	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt_bootstrap.9683f91f.bundle.min.js	false		high
https://www.atuiqe.com/	false		unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/usedPlatformApis.c3e70464.chunk.min.js	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt_bootstrap-responsive.af222ade.bundle.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_5.89e517ff.chunk.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_37.41a8197c.chunk.min.js	false		high
https://static.wixstatic.com/media/18d56f_c46b7b95e5894692ba9bc7611abbf2a8~mv2.png/v1/fill/w_75,h_78,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/18d56f_c46b7b95e5894692ba9bc7611abbf2a8~mv2.png	false		high
https://static.parastorage.com/services/forms-viewer/1.878.0/viewerScript.bundle.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/triggersAndReactions.66bcbb0c.chunk.min.js	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt_bootstrap-responsive.c44fdfc4.bundle.min.js	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt[SkipToContentButton].69abe737.bundle.min.js	false		high
https://static.parastorage.com/fonts/v2/eca8b0cd-45d8-43cf-aee7-ca462bc5497c/v1/din-next-w01-light.woff2	false		high
https://static.parastorage.com/services/editor-elements-library/dist/thunderbolt/rb_wixui.thunderbolt[Container_DefaultAreaSkin].a01e6e19.bundle.min.js	false		high
https://static.parastorage.com/unpkg/react-dom@18.3.1/umd/react-dom.production.min.js	false		high
https://static.parastorage.com/services/profile-card-tpa-ooi/1.2548.0/ProfileCardController.bundle.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_11.3fa95a07.chunk.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_38.0437e39e.chunk.min.js	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_2.13c976ac.chunk.min.js	false		high
https://static.wixstatic.com/media/18d56f_8421f27b99704812a266707a3de08f8e~mv2.png/v1/fill/w_75,h_72,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Logo_-_Seattle_Housing_Authority_400x400.png	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/motion.6300eb66.chunk.min.js	false		high
https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid_forms.7695d9e4.bundle.min.js	false		high
https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid[ClassicSection].e0d6da83.bundle.min.js	false		high
https://static.parastorage.com/services/editor-elements/1.12908.0/rb_wixui.thunderbolt.manifest.min.json	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_4.92eb9137.chunk.min.js	false		high
https://static.wixstatic.com/media/18d56f_26cd5110f9cc48d296a97e872e7e16ef~mv2.png/v1/crop/x_25,y_0,w_487,h_512/fill/w_74,h_78,al_c,q_85,usm_0.66_1.00_0.01,blur_3,enc_auto/8956264_edited.png	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/AppController.corvid.e55c660c.chunk.min.js	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.atuiqe.com/profile/	chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://static.parastorage.com/services/wix-thunderbolt/dist/platformPubsub.236f41ee.chunk.min.js.ma	chromecache_369.2.dr, chromecache_451.2.dr	false		high
https://static.parastorage.com/services/editor-elements-design-systems/dist/thunderbolt/	chromecache_248.2.dr, chromecache_390.2.dr, chromecache_407.2.dr, chromecache_365.2.dr	false		high
https://static.parastorage.com/services/editor-elements-library/dist/corvid/rb_wixui.corvid_bootstra	chromecache_375.2.dr, chromecache_289.2.dr, chromecache_410.2.dr, chromecache_385.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/environmentWixCodeSdk.7690a40b.chunk.mi	chromecache_491.2.dr, chromecache_455.2.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_314.2.dr, chromecache_555.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_2.13c976ac.chunk.min.js.map	chromecache_275.2.dr, chromecache_519.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/triggersAndReactions.66bcbb0c.chunk.min	chromecache_561.2.dr, chromecache_522.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/bi.inline.b203996e.bundle.min.js.map	chromecache_314.2.dr, chromecache_555.2.dr	false		high
https://openjsf.org/	chromecache_304.2.dr, chromecache_457.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/main.66ad2b1b.bundle.min.js.map	chromecache_434.2.dr, chromecache_515.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_28.80fe286a.chunk.min.js.map	chromecache_493.2.dr, chromecache_501.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/router.a5287863.chunk.min.js.map	chromecache_516.2.dr, chromecache_301.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/ooi.23a751c1.chunk.min.js.map	chromecache_337.2.dr, chromecache_347.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_23.3eeabd9c.chunk.min.js.map	chromecache_240.2.dr, chromecache_292.2.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_314.2.dr, chromecache_555.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/animations.0c47ed2a.chunk.min.js.map	chromecache_357.2.dr, chromecache_474.2.dr	false		high
https://static.wixstatic.com/media/18d56f_31011925174f4869acb70fb00376c11c~mv2.png/v1/fill/w_40	chromecache_314.2.dr, chromecache_555.2.dr	false		high
http://underscorejs.org/LICENSE	chromecache_304.2.dr, chromecache_457.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_4.92eb9137.chunk.min.js.map	chromecache_273.2.dr, chromecache_543.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_7.bae0ce0c.chunk.min.css	chromecache_314.2.dr, chromecache_555.2.dr	false		high
https://greensock.com/standard-license	chromecache_286.2.dr, chromecache_299.2.dr, chromecache_560.2.dr, chromecache_450.2.dr	false		high
https://static.wixstatic.com/media/18d56f_214bde7c0a7349249deecf67414ccbf6~mv2.png/v1/fill/w_85	chromecache_314.2.dr, chromecache_555.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/passwordProtectedPage.f58235c3.chunk.mi	chromecache_488.2.dr, chromecache_296.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_304.2.dr, chromecache_457.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_11.3fa95a07.chunk.min.js.map	chromecache_506.2.dr, chromecache_298.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_30.81479495.chunk.min.js.map	chromecache_546.2.dr, chromecache_471.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/webpack-runtime.841566f8.bundle.min.js.	chromecache_555.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/initCustomElements.inline.edeb13a4.bund	chromecache_314.2.dr, chromecache_555.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/svgLoader.67cd7ecf.chunk.min.js.map	chromecache_502.2.dr, chromecache_256.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/sendBeat12.inline.1d5ac45a.bundle.min.j	chromecache_314.2.dr, chromecache_555.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/siteMembers.55bcda3b.chunk.min.js.map	chromecache_422.2.dr, chromecache_291.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_38.0437e39e.chunk.min.js.map	chromecache_444.2.dr, chromecache_391.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/windowScroll.2b6c52d3.chunk.min.js.map	chromecache_326.2.dr, chromecache_342.2.dr	false		high
https://static.parastorage.com/services/wix-thunderbolt/dist/group_0.6a56df09.chunk.min.js.map	chromecache_430.2.dr, chromecache_423.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
34.49.229.81	td-static-34-49-229-81.parastorage.com	United States	2686	ATGS-MMD-ASUS	false
52.204.161.98	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
18.66.27.76	d1cq301dpr7fww.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
185.230.63.171	atuiqe.com	Israel	58182	WIX_COMIL	true
99.86.4.79	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
34.149.87.45	td-ccm-neg-87-45.wixdns.net	United States	2686	ATGS-MMD-ASUS	false
34.149.206.255	glb-editor.wix.com	United States	2686	ATGS-MMD-ASUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1552387
Start date and time:	2024-11-08 17:42:01 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://atuiqe.com/so/99PC8OXJg/c?w=QkhD4F_29qlP63xGZtdrzJ7YP7_meHXlHcBWS8oSJek.eyJ1IjoiaHR0cHM6Ly93d3cuYXR1aXFlLmNvbS8iLCJtIjoibWFpbCIsImMiOiJhNmQ4NTViMi04ODFjLTQ4ZDItYmIwMC0wYzNhZGEyOTdhNTYifQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@16/507@24/10

Input	Output
URL: Model: claude-3-5-sonnet-latest	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: URL: https://atuiqe.com
URL: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56 Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: Model: claude-3-5-sonnet-latest	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": false }
URL: URL: https://www.atuiqe.com
URL: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56 Model: claude-3-haiku-20240307	```json { "brands": [ "ATUIQE" ] }
	```json { "brands": [ "ATUIQE" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Nov 8 15:42:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.974981096882825
Encrypted:	false
SSDEEP:	48:85doTMAkH4idAKZdA19ehwiZUklqehey+3:8c/bxy
MD5:	3276F2AB3549D4F0C3BD78FDF2C631BE
SHA1:	CFCE0C41738D7B24C618687FB737D5D9BC1B0CDC
SHA-256:	D265DC68FAB4F0443205B59EAA66959A4FBE6D4C580AABCAB2B27596015CB864
SHA-512:	EF5F71E8B73CE06E93B1B80EA6252AB7BA4CA4B25E0DC54B155DEEB3B3DC9B755DCA4E10BCDAE6469E3CBFB5A006CD8A8408257C0F15C03BA4A602D9AA05E8D3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......A.1..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IhYY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VhYY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VhYY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VhYY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VhY[............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........~wjV.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 8, 2024 17:42:54.019423962 CET	192.168.2.5	1.1.1.1	0xd579	Standard query (0)	atuiqe.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:54.019690990 CET	192.168.2.5	1.1.1.1	0xe004	Standard query (0)	atuiqe.com	65	IN (0x0001)	false
Nov 8, 2024 17:42:55.294146061 CET	192.168.2.5	1.1.1.1	0xcc3	Standard query (0)	www.atuiqe.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:55.294738054 CET	192.168.2.5	1.1.1.1	0x314d	Standard query (0)	www.atuiqe.com	65	IN (0x0001)	false
Nov 8, 2024 17:42:56.983345985 CET	192.168.2.5	1.1.1.1	0x2b3f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:56.984711885 CET	192.168.2.5	1.1.1.1	0x941a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 8, 2024 17:42:58.562123060 CET	192.168.2.5	1.1.1.1	0x673f	Standard query (0)	static.parastorage.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.562298059 CET	192.168.2.5	1.1.1.1	0x5cd4	Standard query (0)	static.parastorage.com	65	IN (0x0001)	false
Nov 8, 2024 17:42:58.565691948 CET	192.168.2.5	1.1.1.1	0xe44d	Standard query (0)	static.wixstatic.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.565886021 CET	192.168.2.5	1.1.1.1	0xd7cc	Standard query (0)	static.wixstatic.com	65	IN (0x0001)	false
Nov 8, 2024 17:42:58.568206072 CET	192.168.2.5	1.1.1.1	0xd8	Standard query (0)	frog.wix.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.568345070 CET	192.168.2.5	1.1.1.1	0xe488	Standard query (0)	frog.wix.com	65	IN (0x0001)	false
Nov 8, 2024 17:42:58.569575071 CET	192.168.2.5	1.1.1.1	0xc99b	Standard query (0)	panorama.wixapps.net	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.569802999 CET	192.168.2.5	1.1.1.1	0x992a	Standard query (0)	panorama.wixapps.net	65	IN (0x0001)	false
Nov 8, 2024 17:42:58.573208094 CET	192.168.2.5	1.1.1.1	0x1eba	Standard query (0)	siteassets.parastorage.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.573612928 CET	192.168.2.5	1.1.1.1	0x7734	Standard query (0)	siteassets.parastorage.com	65	IN (0x0001)	false
Nov 8, 2024 17:42:59.576260090 CET	192.168.2.5	1.1.1.1	0xecbe	Standard query (0)	www.atuiqe.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:59.576539040 CET	192.168.2.5	1.1.1.1	0xee4b	Standard query (0)	www.atuiqe.com	65	IN (0x0001)	false
Nov 8, 2024 17:43:00.427038908 CET	192.168.2.5	1.1.1.1	0xff06	Standard query (0)	static.wixstatic.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:00.427177906 CET	192.168.2.5	1.1.1.1	0x537b	Standard query (0)	static.wixstatic.com	65	IN (0x0001)	false
Nov 8, 2024 17:43:00.429292917 CET	192.168.2.5	1.1.1.1	0xff3b	Standard query (0)	static.parastorage.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:00.429478884 CET	192.168.2.5	1.1.1.1	0xa16e	Standard query (0)	static.parastorage.com	65	IN (0x0001)	false
Nov 8, 2024 17:43:08.811136961 CET	192.168.2.5	1.1.1.1	0xf3e7	Standard query (0)	siteassets.parastorage.com	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:08.811288118 CET	192.168.2.5	1.1.1.1	0xe6d5	Standard query (0)	siteassets.parastorage.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 8, 2024 17:42:54.304456949 CET	1.1.1.1	192.168.2.5	0xd579	No error (0)	atuiqe.com		185.230.63.171	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:54.304456949 CET	1.1.1.1	192.168.2.5	0xd579	No error (0)	atuiqe.com		185.230.63.186	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:54.304456949 CET	1.1.1.1	192.168.2.5	0xd579	No error (0)	atuiqe.com		185.230.63.107	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:55.339308977 CET	1.1.1.1	192.168.2.5	0x314d	No error (0)	www.atuiqe.com	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:55.339308977 CET	1.1.1.1	192.168.2.5	0x314d	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:55.471982956 CET	1.1.1.1	192.168.2.5	0xcc3	No error (0)	www.atuiqe.com	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:55.471982956 CET	1.1.1.1	192.168.2.5	0xcc3	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:55.471982956 CET	1.1.1.1	192.168.2.5	0xcc3	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:56.990967989 CET	1.1.1.1	192.168.2.5	0x2b3f	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:56.992177010 CET	1.1.1.1	192.168.2.5	0x941a	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 8, 2024 17:42:58.569118023 CET	1.1.1.1	192.168.2.5	0x673f	No error (0)	static.parastorage.com	static-external.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.569118023 CET	1.1.1.1	192.168.2.5	0x673f	No error (0)	static-external.parastorage.com	td-static-34-49-229-81.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.569118023 CET	1.1.1.1	192.168.2.5	0x673f	No error (0)	td-static-34-49-229-81.parastorage.com		34.49.229.81	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.569468021 CET	1.1.1.1	192.168.2.5	0x5cd4	No error (0)	static.parastorage.com	static-external.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.569468021 CET	1.1.1.1	192.168.2.5	0x5cd4	No error (0)	static-external.parastorage.com	td-static-34-49-229-81.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.573081970 CET	1.1.1.1	192.168.2.5	0xe44d	No error (0)	static.wixstatic.com	d1cq301dpr7fww.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.573081970 CET	1.1.1.1	192.168.2.5	0xe44d	No error (0)	d1cq301dpr7fww.cloudfront.net		18.66.27.76	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.573081970 CET	1.1.1.1	192.168.2.5	0xe44d	No error (0)	d1cq301dpr7fww.cloudfront.net		18.66.27.28	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.573081970 CET	1.1.1.1	192.168.2.5	0xe44d	No error (0)	d1cq301dpr7fww.cloudfront.net		18.66.27.79	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.573081970 CET	1.1.1.1	192.168.2.5	0xe44d	No error (0)	d1cq301dpr7fww.cloudfront.net		18.66.27.63	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.574640036 CET	1.1.1.1	192.168.2.5	0xd7cc	No error (0)	static.wixstatic.com	d1cq301dpr7fww.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.575145006 CET	1.1.1.1	192.168.2.5	0xd8	No error (0)	frog.wix.com	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.575145006 CET	1.1.1.1	192.168.2.5	0xd8	No error (0)	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com		52.204.161.98	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.575145006 CET	1.1.1.1	192.168.2.5	0xd8	No error (0)	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com		35.175.47.255	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.575145006 CET	1.1.1.1	192.168.2.5	0xd8	No error (0)	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com		44.198.1.203	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.575145006 CET	1.1.1.1	192.168.2.5	0xd8	No error (0)	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com		3.232.23.246	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.575145006 CET	1.1.1.1	192.168.2.5	0xd8	No error (0)	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com		34.203.173.1	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.575145006 CET	1.1.1.1	192.168.2.5	0xd8	No error (0)	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com		34.206.34.10	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.575238943 CET	1.1.1.1	192.168.2.5	0xe488	No error (0)	frog.wix.com	bi-flogger-alb-ext-343643057.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.576169014 CET	1.1.1.1	192.168.2.5	0xc99b	No error (0)	panorama.wixapps.net	verticals.wix.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.576169014 CET	1.1.1.1	192.168.2.5	0xc99b	No error (0)	verticals.wix.com	editor.wix.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.576169014 CET	1.1.1.1	192.168.2.5	0xc99b	No error (0)	editor.wix.com	glb-editor.wix.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.576169014 CET	1.1.1.1	192.168.2.5	0xc99b	No error (0)	glb-editor.wix.com		34.149.206.255	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.577017069 CET	1.1.1.1	192.168.2.5	0x992a	No error (0)	panorama.wixapps.net	verticals.wix.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.577017069 CET	1.1.1.1	192.168.2.5	0x992a	No error (0)	verticals.wix.com	editor.wix.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.577017069 CET	1.1.1.1	192.168.2.5	0x992a	No error (0)	editor.wix.com	glb-editor.wix.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.580941916 CET	1.1.1.1	192.168.2.5	0x1eba	No error (0)	siteassets.parastorage.com	static.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.580941916 CET	1.1.1.1	192.168.2.5	0x1eba	No error (0)	static.parastorage.com	static-external.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.580941916 CET	1.1.1.1	192.168.2.5	0x1eba	No error (0)	static-external.parastorage.com	td-static-34-49-229-81.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.580941916 CET	1.1.1.1	192.168.2.5	0x1eba	No error (0)	td-static-34-49-229-81.parastorage.com		34.49.229.81	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:58.581428051 CET	1.1.1.1	192.168.2.5	0x7734	No error (0)	siteassets.parastorage.com	static.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.581428051 CET	1.1.1.1	192.168.2.5	0x7734	No error (0)	static.parastorage.com	static-external.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:58.581428051 CET	1.1.1.1	192.168.2.5	0x7734	No error (0)	static-external.parastorage.com	td-static-34-49-229-81.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:59.616817951 CET	1.1.1.1	192.168.2.5	0xecbe	No error (0)	www.atuiqe.com	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:59.616817951 CET	1.1.1.1	192.168.2.5	0xecbe	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:59.616817951 CET	1.1.1.1	192.168.2.5	0xecbe	No error (0)	td-ccm-neg-87-45.wixdns.net		34.149.87.45	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:42:59.647553921 CET	1.1.1.1	192.168.2.5	0xee4b	No error (0)	www.atuiqe.com	cdn1.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:42:59.647553921 CET	1.1.1.1	192.168.2.5	0xee4b	No error (0)	cdn1.wixdns.net	td-ccm-neg-87-45.wixdns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:00.434694052 CET	1.1.1.1	192.168.2.5	0xff06	No error (0)	static.wixstatic.com	d1cq301dpr7fww.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:00.434694052 CET	1.1.1.1	192.168.2.5	0xff06	No error (0)	d1cq301dpr7fww.cloudfront.net		99.86.4.79	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:00.434694052 CET	1.1.1.1	192.168.2.5	0xff06	No error (0)	d1cq301dpr7fww.cloudfront.net		99.86.4.125	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:00.434694052 CET	1.1.1.1	192.168.2.5	0xff06	No error (0)	d1cq301dpr7fww.cloudfront.net		99.86.4.105	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:00.434694052 CET	1.1.1.1	192.168.2.5	0xff06	No error (0)	d1cq301dpr7fww.cloudfront.net		99.86.4.90	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:00.435062885 CET	1.1.1.1	192.168.2.5	0x537b	No error (0)	static.wixstatic.com	d1cq301dpr7fww.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:00.436192989 CET	1.1.1.1	192.168.2.5	0xff3b	No error (0)	static.parastorage.com	static-external.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:00.436192989 CET	1.1.1.1	192.168.2.5	0xff3b	No error (0)	static-external.parastorage.com	td-static-34-49-229-81.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:00.436192989 CET	1.1.1.1	192.168.2.5	0xff3b	No error (0)	td-static-34-49-229-81.parastorage.com		34.49.229.81	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:00.436938047 CET	1.1.1.1	192.168.2.5	0xa16e	No error (0)	static.parastorage.com	static-external.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:00.436938047 CET	1.1.1.1	192.168.2.5	0xa16e	No error (0)	static-external.parastorage.com	td-static-34-49-229-81.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:08.566840887 CET	1.1.1.1	192.168.2.5	0x457d	No error (0)	windowsupdatebg.s.llnwi.net		87.248.204.0	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:08.818720102 CET	1.1.1.1	192.168.2.5	0xf3e7	No error (0)	siteassets.parastorage.com	static.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:08.818720102 CET	1.1.1.1	192.168.2.5	0xf3e7	No error (0)	static.parastorage.com	static-external.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:08.818720102 CET	1.1.1.1	192.168.2.5	0xf3e7	No error (0)	static-external.parastorage.com	td-static-34-49-229-81.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:08.818720102 CET	1.1.1.1	192.168.2.5	0xf3e7	No error (0)	td-static-34-49-229-81.parastorage.com		34.49.229.81	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:08.818911076 CET	1.1.1.1	192.168.2.5	0xe6d5	No error (0)	siteassets.parastorage.com	static.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:08.818911076 CET	1.1.1.1	192.168.2.5	0xe6d5	No error (0)	static.parastorage.com	static-external.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:08.818911076 CET	1.1.1.1	192.168.2.5	0xe6d5	No error (0)	static-external.parastorage.com	td-static-34-49-229-81.parastorage.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:09.409986019 CET	1.1.1.1	192.168.2.5	0x69ba	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:09.409986019 CET	1.1.1.1	192.168.2.5	0x69ba	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:09.452800989 CET	1.1.1.1	192.168.2.5	0x9282	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:09.452800989 CET	1.1.1.1	192.168.2.5	0x9282	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:23.010409117 CET	1.1.1.1	192.168.2.5	0x7632	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:23.010409117 CET	1.1.1.1	192.168.2.5	0x7632	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:43:45.389753103 CET	1.1.1.1	192.168.2.5	0x2a84	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:43:45.389753103 CET	1.1.1.1	192.168.2.5	0x2a84	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:44:08.361011028 CET	1.1.1.1	192.168.2.5	0x49c3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:44:08.361011028 CET	1.1.1.1	192.168.2.5	0x49c3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:44:11.167711020 CET	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 8, 2024 17:44:11.167711020 CET	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.35	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:44:11.167711020 CET	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.23	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:44:11.167711020 CET	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.38	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:44:11.167711020 CET	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		84.201.210.22	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:44:11.167711020 CET	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.37	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:44:11.167711020 CET	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.43	A (IP address)	IN (0x0001)	false
Nov 8, 2024 17:44:11.167711020 CET	1.1.1.1	192.168.2.5	0x2ed2	No error (0)	default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.39	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:54 UTC	828	OUT	GET /so/99PC8OXJg/c?w=QkhD4F_29qlP63xGZtdrzJ7YP7_meHXlHcBWS8oSJek.eyJ1IjoiaHR0cHM6Ly93d3cuYXR1aXFlLmNvbS8iLCJtIjoibWFpbCIsImMiOiJhNmQ4NTViMi04ODFjLTQ4ZDItYmIwMC0wYzNhZGEyOTdhNTYifQ HTTP/1.1 Host: atuiqe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:42:55 UTC	610	IN	HTTP/1.1 302 Found Date: Fri, 08 Nov 2024 16:42:55 GMT Content-Length: 0 Connection: close location: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56 X-Seen-By: jKB0KR2wTEE1MYSdxvKSbciHE4dbw+wewoJ5nvKoyjE=,m0j2EEknGIVUW/liY8BLLjBdxec7r7DHGEpZo2ij+27F+NHRbelhY0dsZwjDYnLI,rXUceJIlvIg2Ftogbhjv0CTnG4K+cTrJR5wge+yT7PYM3erJpXKHv8Sa1ajv1zjS4jggsI+rGrqhpxNFsO8s/A==,SyyhSd/GJpnOwr8HB8ZFFqcKJ7iMPkLlyE/6thK4I68= X-Wix-Request-Id: 1731084175.05613881321411132681 Server: Pepyaka X-Content-Type-Options: nosniff

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:56 UTC	778	OUT	GET /?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56 HTTP/1.1 Host: www.atuiqe.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:42:57 UTC	1842	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Link: <https://static.parastorage.com/>; rel=preconnect; crossorigin;,<https://static.parastorage.com/>; rel=preconnect;,<https://static.wixstatic.com/>; rel=preconnect; crossorigin;,<https://static.wixstatic.com/>; rel=preconnect;,<https://siteassets.parastorage.com>; rel=preconnect; crossorigin;, X-Wix-Request-Id: 1731084176.518125256251682957693 Html-Cacheable: true ETag: W/"69b4c2e4f95828c0e2c51597b891d14e" Content-Language: en-US Strict-Transport-Security: max-age=86400 Cache-Control: public,max-age=0,must-revalidate Server: Pepyaka X-Content-Type-Options: nosniff Accept-Ranges: bytes Age: 0 Date: Fri, 08 Nov 2024 16:42:57 GMT X-Served-By: cache-dfw-kdfw8210149-DFW X-Cache: MISS Vary: Accept-Encoding Server-Timing: cache;desc=miss, varnish;desc=miss_miss, dc;desc=fastly_42_g Set-Cookie: ssr-caching=cache#desc=miss#varnish=miss_miss#dc#desc=fastly_42_g; max-age=20 X-Seen-By: yvSunuo/8ld62ehjr5B7kA==,oDbbMvfdXCdtsgjD2KgaM8iHE4dbw+wewoJ5nvKoyjE=,m0j2EEknGIVUW/liY8BLLtxC2QzlrRbAAvzqVquzIn5kavE0ZtMXws1mfakihq4B,2d58ifebGbosy5xc+FRalmbmj53AmVXDPZZZmeAH1H0RRYAPHfzujo7ZuhWgzEUBpmMwE5zDYDJAdY9/q/ERtA==,2UNV7KOq4oGjA5+PKsX47B1ANU/aY3kA+J3E1oSuFO5YgeUJqUXtid+86vZww+nL,izmH/eP56qbCoRavTUFccBH4B9qo21mJHjq6XnlgJp8=,4EmzKGKKpFffqfFwZRPY8Yl7/ndQV8u4BiIpGy29QaUcTX8zqPQn3ZHF4a9zh7Q70Wfdqrz2VEUrfzi372A/5g==,34j2pONIIdHqo7PuFI/3J1UKzLtXrf3xUmzM6YAcc54=,LoUK8/saGAmOxZWtpubo2usPIPwk5LGTj2CV91u8Rn6rFhM3b1Ol91qj6qW5lS0x2N8Q0sTNcxFpmLIVNkXb0g==,GVHYr8+s1WPqKyQkelfa7zLKalKrG7Ce9plZ1A+i8V8=,bamBRVWSlN/v1ZTIwXGEoALFIJ1RdP0F37rQcOJ2u8vN1gKS/OZfSuqyrpBM+H0h8hJGWDx+TuGwG3N2wRaZmw== Transfer-Encoding: chunked Via: 1.1 google glb-x-seen-by: bS8wRlGzu0Hc+WrYuHB8QIg44yfcdCMJRkBoQ1h6Vjc= Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-08 16:42:57 UTC	1842	IN	Data Raw: 34 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 69 64 3d 22 77 69 78 44 65 73 6b 74 6f 70 56 69 65 77 70 6f 72 74 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e Data Ascii: 41da<!DOCTYPE html><html lang="en"><head> <meta charset='utf-8'> <meta name="viewport" content="width=device-width, initial-scale=1" id="wixDesktopViewport" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="generator" con
2024-11-08 16:42:57 UTC	1842	IN	Data Raw: 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 6e 6f 77 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 6e 69 74 69 61 6c 54 69 6d 65 73 74 61 6d 70 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 54 69 6d 65 73 74 61 6d 70 3a 20 6e 6f 77 2c 0a 20 20 20 20 20 20 20 20 69 6e 69 74 69 61 6c 52 65 71 75 65 73 74 54 69 6d 65 73 74 61 6d 70 3a 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 65 4f 72 69 67 69 6e 20 3f 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 65 4f 72 69 67 69 6e 20 3a 20 6e 6f 77 20 2d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 29 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 68 75 6e 64 65 72 62 6f 6c 74 54 61 67 Data Ascii: n () { var now = Date.now() window.initialTimestamps = { initialTimestamp: now, initialRequestTimestamp: Math.round(performance.timeOrigin ? performance.timeOrigin : now - performance.now()) } window.thunderboltTag
2024-11-08 16:42:57 UTC	1842	IN	Data Raw: 22 64 79 6e 61 6d 69 63 50 61 67 65 73 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 57 69 78 43 6f 64 65 53 64 6b 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 22 6c 6f 63 61 74 69 6f 6e 57 69 78 43 6f 64 65 53 64 6b 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 4d 61 6e 61 67 65 72 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 50 68 61 73 65 73 22 2c 22 6f 6f 69 22 2c 22 70 61 67 65 73 22 2c 22 70 61 6e 6f 72 61 6d 61 22 2c 22 70 72 6f 74 65 63 74 65 64 50 61 67 65 73 22 2c 22 72 65 6e 64 65 72 65 72 22 2c 22 72 65 70 6f 72 74 65 72 22 2c 22 72 6f 75 74 65 72 46 65 74 63 68 22 2c 22 72 6f 75 74 65 72 22 2c 22 73 63 72 6f 6c 6c 52 65 73 74 6f 72 61 74 69 6f 6e 22 2c 22 73 65 6f 57 69 78 43 6f 64 65 53 64 6b 22 2c 22 73 65 6f 22 2c 22 73 65 73 73 69 6f 6e 4d 61 6e 61 67 Data Ascii: "dynamicPages","environmentWixCodeSdk","environment","locationWixCodeSdk","navigationManager","navigationPhases","ooi","pages","panorama","protectedPages","renderer","reporter","routerFetch","router","scrollRestoration","seoWixCodeSdk","seo","sessionManag
2024-11-08 16:42:57 UTC	1842	IN	Data Raw: 61 2d 75 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 74 68 75 6e 64 65 72 62 6f 6c 74 2f 64 69 73 74 2f 68 61 6e 64 6c 65 41 63 63 65 73 73 54 6f 6b 65 6e 73 2e 69 6e 6c 69 6e 65 2e 35 61 36 37 62 35 36 33 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 22 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 65 3d 3e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 53 74 61 72 74 28 29 3a 65 2c 74 3d 22 63 6c 69 65 6e 74 2d 73 65 73 73 69 6f 6e 2d 62 69 6e 64 22 2c 6f 3d 22 63 6c 69 65 6e Data Ascii: a-url="https://static.parastorage.com/services/wix-thunderbolt/dist/handleAccessTokens.inline.5a67b563.bundle.min.js">!function(){"use strict";const e=e=>"string"==typeof e?decodeURIComponent(e).toLowerCase().trimStart():e,t="client-session-bind",o="clien
2024-11-08 16:42:57 UTC	1842	IN	Data Raw: 30 5d 29 3b 6e 2e 65 76 65 72 79 28 28 65 3d 3e 21 6f 2e 73 74 61 72 74 73 57 69 74 68 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 29 26 26 69 2e 73 65 74 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2c 74 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 7d 29 7d 28 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 70 61 72 61 73 74 6f 72 61 67 65 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 77 69 78 2d 74 68 75 6e 64 65 72 62 6f 6c 74 2f 64 69 73 74 2f 68 61 6e 64 6c 65 41 63 63 65 73 73 54 6f 6b 65 6e 73 2e 69 6e 6c 69 6e 65 2e 35 61 36 37 62 35 36 33 2e 62 75 6e 64 6c 65 2e 6d 69 6e 2e 6a 73 2e 6d 61 70 3c 2f 73 63 72 69 70 74 3e 0a 20 Data Ascii: 0]);n.every((e=>!o.startsWith(e.toLowerCase())))&&i.set.call(document,t)},enumerable:!0,configurable:!1})}();//# sourceMappingURL=https://static.parastorage.com/services/wix-thunderbolt/dist/handleAccessTokens.inline.5a67b563.bundle.min.js.map</script>
2024-11-08 16:42:58 UTC	1842	IN	Data Raw: 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 2e 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 2e 64 65 76 69 63 65 2d 6d 6f 62 69 6c 65 2d 6f 70 74 69 6d 69 7a 65 64 20 23 6d 61 73 74 65 72 50 61 67 65 2c 62 6f 64 79 2e 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 2e 64 65 76 69 63 65 2d 6d 6f 62 69 6c 65 2d 6f 70 74 69 6d 69 7a 65 64 20 23 73 69 74 65 2d 72 6f 6f 74 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 62 6f 64 79 2e 66 75 6c 6c 53 63 72 65 65 6e 4d 6f 64 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 2e Data Ascii: mportant;overflow-y:auto!important}body.fullScreenMode-scrollable.device-mobile-optimized #masterPage,body.fullScreenMode-scrollable.device-mobile-optimized #site-root{overflow-x:hidden!important;overflow-y:hidden!important}body.fullScreenMode-scrollable.
2024-11-08 16:42:58 UTC	1842	IN	Data Raw: 69 6f 6e 3d 4f 75 74 49 6e 5d 3a 3a 76 69 65 77 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6f 6c 64 28 70 61 67 65 2d 67 72 6f 75 70 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 75 74 2d 69 6e 2d 6f 6c 64 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 34 2c 30 2c 2e 37 38 2c 30 29 20 66 6f 72 77 61 72 64 73 7d 68 74 6d 6c 5b 64 61 74 61 2d 70 61 67 65 2d 74 72 61 6e 73 69 74 69 6f 6e 3d 4f 75 74 49 6e 5d 3a 3a 76 69 65 77 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 6e 65 77 28 70 61 67 65 2d 67 72 6f 75 70 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 75 74 2d 69 6e 2d 6e 65 77 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 32 2c 31 2c 2e 33 36 2c 31 29 20 2e 33 35 73 20 62 61 63 6b 77 61 72 64 73 7d 40 6d 65 64 69 61 28 70 72 65 66 65 72 73 2d 72 65 Data Ascii: ion=OutIn]::view-transition-old(page-group){animation:out-in-old .35s cubic-bezier(.64,0,.78,0) forwards}html[data-page-transition=OutIn]::view-transition-new(page-group){animation:out-in-new .35s cubic-bezier(.22,1,.36,1) .35s backwards}@media(prefers-re
2024-11-08 16:42:58 UTC	1417	IN	Data Raw: 3a 6e 6f 6e 65 7d 64 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6c 69 6e 65 2d 74 68 72 6f 75 67 68 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 61 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 74 65 73 74 53 74 79 6c 65 73 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 7d 2e 72 65 73 65 74 2d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 Data Ascii: :none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}a{cursor:pointer;text-decoration:none}.testStyles{overflow-y:hidden}.reset-button{-webkit-appearance:none;background:none;border:0;color:inherit;font:inherit;line-heigh
2024-11-08 16:42:58 UTC	1378	IN	Data Raw: 2d 67 72 69 64 2d 72 6f 77 3a 32 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 6d 61 73 74 65 72 50 61 67 65 2e 6d 65 73 68 2d 6c 61 79 6f 75 74 7b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 73 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 20 6d 61 78 2d 63 6f 6e 74 65 6e 74 20 6d 69 6e 2d 63 6f 6e 74 65 6e 74 20 6d 61 78 2d 63 6f 6e 74 65 6e 74 3b 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 73 3a 31 30 30 25 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 67 72 69 64 3b 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 31 30 30 25 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 72 6f 77 73 3a 6d 61 78 2d 63 6f 6e 74 65 6e 74 20 6d 61 78 2d 63 6f 6e 74 65 6e 74 Data Ascii: -grid-row:2;position:relative}#masterPage.mesh-layout{-ms-grid-rows:max-content max-content min-content max-content;-ms-grid-columns:100%;align-items:start;display:-ms-grid;display:grid;grid-template-columns:100%;grid-template-rows:max-content max-content
2024-11-08 16:42:58 UTC	1177	IN	Data Raw: 20 23 53 49 54 45 5f 46 4f 4f 54 45 52 5f 57 52 41 50 50 45 52 7b 67 72 69 64 2d 61 72 65 61 3a 34 2f 31 2f 35 2f 32 3b 2d 6d 73 2d 67 72 69 64 2d 72 6f 77 3a 34 7d 23 6d 61 73 74 65 72 50 61 67 65 2e 6d 65 73 68 2d 6c 61 79 6f 75 74 20 23 53 49 54 45 5f 50 41 47 45 53 2c 23 6d 61 73 74 65 72 50 61 67 65 2e 6d 65 73 68 2d 6c 61 79 6f 75 74 20 5b 64 61 74 61 2d 6d 65 73 68 2d 69 64 3d 50 41 47 45 53 5f 43 4f 4e 54 41 49 4e 45 52 63 65 6e 74 65 72 65 64 43 6f 6e 74 65 6e 74 5d 2c 23 6d 61 73 74 65 72 50 61 67 65 2e 6d 65 73 68 2d 6c 61 79 6f 75 74 20 5b 64 61 74 61 2d 6d 65 73 68 2d 69 64 3d 50 41 47 45 53 5f 43 4f 4e 54 41 49 4e 45 52 69 6e 6c 69 6e 65 43 6f 6e 74 65 6e 74 5d 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 23 6d 61 73 74 65 72 50 61 67 65 2e 6d 65 Data Ascii: #SITE_FOOTER_WRAPPER{grid-area:4/1/5/2;-ms-grid-row:4}#masterPage.mesh-layout #SITE_PAGES,#masterPage.mesh-layout [data-mesh-id=PAGES_CONTAINERcenteredContent],#masterPage.mesh-layout [data-mesh-id=PAGES_CONTAINERinlineContent]{height:100%}#masterPage.me

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://atuiqe.com/so/99PC8OXJg/c?w=QkhD4F_29qlP63xGZtdrzJ7YP7_meHXlHcBWS8oSJek.eyJ1IjoiaHR0cHM6Ly93d3cuYXR1aXFlLmNvbS8iLCJtIjoibWFpbCIsImMiOiJhNmQ4NTViMi04ODFjLTQ4ZDItYmIwMC0wYzNhZGEyOTdhNTYifQ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Windows Analysis Report
https://atuiqe.com/so/99PC8OXJg/c?w=QkhD4F_29qlP63xGZtdrzJ7YP7_meHXlHcBWS8oSJek.eyJ1IjoiaHR0cHM6Ly93d3cuYXR1aXFlLmNvbS8iLCJtIjoibWFpbCIsImMiOiJhNmQ4NTViMi04ODFjLTQ4ZDItYmIwMC0wYzNhZGEyOTdhNTYifQ

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-08 16:42:58 UTC	464	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=173 Date: Fri, 08 Nov 2024 16:42:58 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	625	OUT	POST /api/v1/bulklog HTTP/1.1 Host: panorama.wixapps.net Connection: keep-alive Content-Length: 524 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.atuiqe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.atuiqe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:42:59 UTC	524	OUT	Data Raw: 7b 22 6d 65 73 73 61 67 65 73 22 3a 5b 7b 22 66 75 6c 6c 41 72 74 69 66 61 63 74 49 64 22 3a 22 63 6f 6d 2e 77 69 78 70 72 65 73 73 2e 68 74 6d 6c 2d 63 6c 69 65 6e 74 2e 77 69 78 2d 74 68 75 6e 64 65 72 62 6f 6c 74 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 49 64 22 3a 22 74 68 75 6e 64 65 72 62 6f 6c 74 22 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 76 69 65 77 65 72 22 2c 22 6d 73 69 64 22 3a 22 62 65 33 63 65 65 36 36 2d 36 38 63 37 2d 34 64 32 31 2d 62 65 37 37 2d 62 62 65 61 65 63 62 64 33 66 63 39 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 39 34 64 61 66 30 37 64 2d 66 39 64 36 2d 34 30 30 64 2d 39 35 32 64 2d 33 30 30 66 34 64 36 38 31 63 37 62 22 2c 22 73 65 73 73 69 6f 6e 54 69 6d 65 22 3a 35 34 34 2c 22 6c 6f 67 4c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c Data Ascii: {"messages":[{"fullArtifactId":"com.wixpress.html-client.wix-thunderbolt","componentId":"thunderbolt","platform":"viewer","msid":"be3cee66-68c7-4d21-be77-bbeaecbd3fc9","sessionId":"94daf07d-f9d6-400d-952d-300f4d681c7b","sessionTime":544,"logLevel":"INFO",
2024-11-08 16:42:59 UTC	866	IN	HTTP/1.1 204 No Content date: Fri, 08 Nov 2024 16:42:59 GMT x-wix-responded-by: wix.monitoring.panorama.v1.log_entity:BulkLog:com.wixpress.monitoring.panorama vary: Accept-Encoding x-seen-by: pmHZlB45NPy7b1VBAukQrewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLuDDIIa33+FT0uCOqY98gHd9UuJLvoOY0uBy3RuVN3og,rXUceJIlvIg2Ftogbhjv0I02VOnqG2PqITPbT6shUA5EQfi00LSS7LJu7sdkoLsD4sz+pBa+05P/ctl3vIDY8g==,r6yY0ta7bIKrqK70x072lU3gIbGL3vt/r/DkXZA7y54=,xos6hzMTUqHgeXPFNZaJBjU46w9HYAueBcce0hDIdjMeziH4HGVXKBK8b2Il2JBYaE68lq4YJsuEu28NehjKEA== x-wix-request-id: 1731084179.3091357703204572350137 server: Pepyaka x-content-type-options: nosniff access-control-allow-origin: * referrer-policy: no-referrer-when-downgrade via: 1.1 google glb-x-seen-by: wMMTADooq5AJ3cFomJ/MuXOQWGce7NCZXKms1ErOpBs= Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	625	OUT	GET /fonts/v2/e3cf8f7e-35c4-446f-9b93-de93e989f66f/v1/lulo-clean-w01-one-bold.woff2 HTTP/1.1 Host: static.parastorage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.atuiqe.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.atuiqe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:42:59 UTC	1177	IN	HTTP/1.1 200 OK Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Server: Pepyaka/1.21.6 Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-* Timing-Allow-Origin: * Access-Control-Allow-Origin: * X-Varnish: 795217730 968663864 Via: 1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0), 1.1 google Content-Length: 13560 X-Cluster-Self-Is-Next: false X-Varnish: 768271999 829806868 X-Cache-Status: HIT X-Seen-By: aVxMblM8KFG3we5NLvyVcySsg8L7vnWD28h/4/gKFeyO8fwxEguwlPQfj4ad/5b1 X-Cluster-Node-Role: serve Accept-Ranges: bytes Date: Wed, 06 Nov 2024 11:59:01 GMT Cache-Control: public, max-age=7776000, immutable Age: 189838 Last-Modified: Thu, 12 Sep 2024 18:06:01 GMT ETag: "2ea951905c7fb7663a62128efa9081f1" Content-Type: font/woff2 x-cache: hit glb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0= x-gcp-cdn-pop: DFW Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-08 16:42:59 UTC	201	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 34 f8 00 0d 00 00 00 00 cb 30 00 00 34 a2 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 16 8b 60 00 84 5c 11 08 0a 81 9a 60 f9 3c 01 36 02 24 03 86 5c 13 81 d0 46 0b 86 60 00 04 20 05 89 2f 07 20 1b 4a b6 d9 44 3b ff 0a 0a d0 00 60 50 de 60 f2 ed 6f cb a8 4e bb 10 9d b0 fb 15 21 a7 63 c9 b9 07 d5 b4 75 d4 84 1b c3 0d 1b 07 31 08 b3 59 f6 ff ff ff ff ff ff ff bb 92 85 c8 f9 ff 9f bf 24 69 93 36 55 58 a7 85 01 db 36 08 92 87 47 40 04 25 19 0d a1 cd 3c 52 a2 42 a5 64 06 4a 14 d0 f5 95 05 ca 8a a1 d2 aa 6a 7a e7 45 33 b6 8a b5 a3 e8 2c ea Data Ascii: wOF2404``\`<6$\F` / JD;`P`oN!cu1Y$i6UX6G@%<RBdJjzE3,
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 42 90 37 6e a3 3a 2a b7 3b 96 d7 03 15 8e f4 31 50 6a 3c 4d 72 23 16 f9 d3 4b 3e 28 36 7b d6 b3 b6 40 03 6a c9 8b 2d c4 08 71 86 be d2 ca 2f 3c 8b 19 32 e0 c6 b3 c4 0e c9 d1 81 8d 7c 86 08 b9 48 d5 c9 5e ee 78 23 1d cd 07 0f eb 27 0f eb 4b 37 ba c9 96 06 9a ac 9f cd 9f 1b d0 97 d1 41 d1 5f 8c a6 a0 b8 9a f5 9a da 99 bf 18 5d 4e 37 88 b8 c3 fa e3 09 db d3 91 3d 6c 7f db ff 61 bf b0 fe f7 80 f5 ff 17 8c 8f 6f 18 7f da 67 3b e5 dd d2 4b ba ce 6f f1 06 29 10 24 c0 cc 12 63 d7 8c 30 9b f6 c8 73 e8 dd f4 ef 92 90 c0 dd a5 54 02 13 63 7b a6 96 10 d6 ec 8d 3a 53 cf 84 76 6a c8 cc 90 00 15 75 a4 36 f3 f7 a7 c3 f3 db fc 3f 46 82 41 f5 e5 52 29 a1 22 51 16 6d 80 60 c6 ec e5 77 db 73 95 ce 5e a7 be 5a f6 9f cb f8 b9 c8 ec 7f 04 7f 80 d3 e7 96 7f ab 58 aa 96 e1 56 51 Data Ascii: B7n:*;1Pj<Mr#K>(6{@j-q/<2\|H^x#'K7A_]N7=laog;Ko)$c0sTc{:Svju6?FAR)"Qm`ws^ZXVQ
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 3e 83 5f 8b 5f 2e ff 9f 56 b0 35 92 1b e8 c7 2d cc 0e 6e 8f 78 1e 90 6b a6 e3 2e 2a 0e e3 62 ca d9 f9 c9 de 7f 5c 70 e1 8a 7f de 08 f3 1f 77 62 f1 20 e5 93 fc f6 45 f5 a6 f9 d0 f3 cb 78 f3 63 fa b3 7e 81 d8 af 61 ce 33 94 5b 86 f2 af 50 41 81 0b 11 a2 91 e2 4b 54 52 d0 d2 64 64 17 ac 02 a7 4c 5e 15 14 d4 44 4d 4a da 80 1c a0 04 a9 51 a9 c5 24 7a 3a 46 6c 9a 71 b9 ad f4 ec 0c e9 84 72 b9 61 9e 56 fa 20 67 40 09 05 22 ed 8c 75 9a e8 4a f5 32 33 48 6e a8 a0 b3 34 fa 2b 63 b5 89 c6 d4 d2 ef 16 ed c3 7d 45 83 3f 6c 62 32 3a 3e cc 87 ad 4b a4 97 71 70 fe 4f f0 53 7e da ce 84 9c 08 d4 0d 08 0b 91 21 3a 04 43 5c 48 0e a5 40 83 4c f8 57 4f 58 b5 68 c7 3f c0 ce c1 41 4e 50 59 bd 7d 14 03 11 21 2a 04 b5 35 d3 f6 fc b5 b6 b4 d7 e7 00 7e 1c fd f1 e7 ed 92 1f 3f 6e 67 Data Ascii: >__.V5-nxk.b\pwb Exc~a3[PAKTRddL^DMJQ$z:FlqraV g@"uJ23Hn4+c}E?lb2:>KqpOS~!:C\H@LWOXh?ANPY}!5~?ng
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 33 fd 53 16 4d 45 4b 8c 95 e0 3d 22 41 2c eb 7d b5 8b f1 4b ee b8 52 e5 d3 7e 8d 83 b2 53 75 dd 0f d9 92 9a 1a 00 a0 4f f2 27 4b 21 07 4f 33 81 11 81 0b f1 89 45 e7 b6 0c ee 74 59 44 e3 2a 0e 1f 08 e0 9f f9 38 95 f2 1c 76 3c dd 86 79 ec 37 06 b6 fd f5 05 0a 9f 93 8b d2 7f 05 3b 14 66 7a 92 18 6a ae b2 04 40 87 28 50 bf d6 cd a5 67 27 8f 5a 38 5a 6f a9 2b 77 e6 e5 11 84 26 c3 cb 14 76 55 60 dc 3d 17 56 54 87 98 9d 64 ad 37 39 b1 37 10 98 24 05 07 4e 1e 17 35 5b f6 31 8e 6d cb ce 4b 96 90 f5 ce e5 24 e0 84 c2 f1 47 c4 a3 e5 35 11 9d bf e9 bc 90 a1 bc 2a 53 6a 01 51 f8 b8 6c 98 58 48 af af 72 1f 02 54 ea 69 10 83 74 48 35 36 8d 13 21 9b fe 27 e4 37 e1 3f ed 78 03 de a4 0b be 92 1b a0 6c aa 9a 0a ad 22 72 e4 61 49 76 94 d9 1c 0a d1 81 79 20 47 69 79 d0 41 32 Data Ascii: 3SMEK="A,}KR~SuO'K!O3EtYD8v<y7;fzj@(Pg'Z8Zo+w&vU`=VTd797$N5[1mK$G5SjQlXHrTitH56!'7?xl"raIvy GiyA2
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: b9 b7 97 bf 41 8c ff 3f 1e ff 42 c7 5e 2e 95 9b ab e6 11 f9 46 fe 9f c5 42 fe fb 65 98 e0 fd 50 b7 70 24 51 68 2a 63 9b 75 90 47 c8 5d f6 f7 66 74 2f db 93 24 e5 78 4c da 3c a6 5c ee 85 3e b3 9d 22 56 5d 73 58 67 6e 81 ee 84 b2 63 46 fc a3 13 bd 2b 88 1b f1 f4 c1 f2 61 9c 47 58 02 35 71 51 dc 27 79 ec b7 68 2c 29 c9 ff 01 ec 7f d2 0a 8f ea 66 80 3c d2 d7 94 5e a0 1e c5 e8 cc c9 61 cc 73 14 9b 36 8f 5b 68 af 1c e7 5c 2a d9 d3 d0 20 d9 eb 5c 72 98 e0 00 d1 19 18 7b 98 97 7b 10 8e ca b1 0f 95 7f 51 45 92 76 f7 88 e8 1c fb b2 e1 d2 61 92 da a5 23 f2 5c 23 10 ba 5d 95 29 f8 96 a3 a0 31 b7 a3 73 47 e7 bc 9d f3 de ae af 03 10 ab 6a 17 4c 52 9a 0b c2 4d f7 56 24 1d 45 9b 21 7d f9 2c af 0b d4 3e 92 ed 93 01 66 a3 71 1f 0a 25 e6 20 db db 7a 9d ad 6a 05 f4 e9 6e 7e Data Ascii: A?B^.FBePp$QhcuG]ft/$xL<\>"V]sXgncF+aGX5qQ'yh,)f<^as6[h\ \r{{QEva#\#])1sGjLRMV$E!},>fq% zjn~
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 47 d3 4a b3 a6 b7 31 02 3a 45 be 26 0a 80 63 c8 a2 a3 ef ec 27 ed ef 80 ec 1e b2 da 21 9d 5c 50 3a 3d d1 1f a0 95 c9 2f 95 4c 76 ec 3a 39 e0 f3 e4 bb 3d 59 f9 be 01 a0 75 e5 71 c7 10 1d 88 53 07 5c 8b c9 1a 8d b6 5f ec b9 b8 b5 e7 42 fb 85 eb bb a9 c3 fd c7 fb 8e f3 a8 a3 9b 8a d8 fd ae fb 5a d7 b5 77 8e 62 6b cf bb af f6 5c 05 0b 5e 0f 92 9f ab 5e d0 87 e8 ca 17 cf 40 30 73 f8 7b 7b 1b 76 37 1d 59 d0 5b bf ab 14 d4 fd 4b 76 48 b6 bf 2e b3 0e c4 5e 39 18 33 70 3d 76 d0 b8 93 f5 00 f1 af b9 de 23 95 83 95 8b a9 b1 ea 06 86 c0 43 61 2a cf e3 ed 42 f9 e8 ef 9a b1 84 ad e3 6e e7 32 ba 61 e2 a6 9f 64 13 64 6b 6e b2 41 64 f3 cf 4d 04 d6 4a 46 ab d4 8d f2 cc 06 d8 27 17 72 5f 7b cf 57 62 50 3c 02 06 c4 ad 3d 31 f1 c8 44 60 52 09 99 6e f4 d2 78 7c 67 49 94 d7 89 Data Ascii: GJ1:E&c'!\P:=/Lv:9=YuqS\_BZwbk\^^@0s{{v7Y[KvH.^93p=v#Ca*Bn2addknAdMJF'r_{WbP<=1D`Rnx\|gI
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: f0 66 76 7c c0 d6 ca 1e 5a d6 15 81 c7 10 22 82 1e 2e 43 52 53 63 9f 7c c4 31 a1 99 2c 0b 86 7d 9f 09 9d fe 68 69 e3 70 a2 ea 6c 58 81 b8 8c f0 15 90 cd e6 8f 2f 8e 49 d7 dd c3 dc 0e d3 b5 d7 03 49 6d 68 89 6f 79 9e 18 da 02 c1 7b 21 68 3f 0c 0d 82 d4 89 aa 24 91 1d 1a c7 70 31 86 60 78 c6 da 99 22 b5 0f d9 b9 ac 73 f1 59 32 09 5f 69 7b 31 60 e6 b2 b2 22 13 be 55 b9 a5 3b a6 4f 42 59 a3 74 e7 9c 2b da a2 56 69 b6 0c 39 da ea cd e3 d6 76 c1 cb ce ed 81 e1 d3 67 07 61 01 db fa 90 b7 16 82 7c 6e 0c b6 ae cb 7f 38 62 5a 2d 76 1f f6 b9 0c 61 73 44 17 98 9f 8b a2 2b 7f 42 ba 2b 4f 53 c3 aa ec 34 f7 b3 19 23 db 16 3d 31 bd a4 5e 3d c3 b9 6d 0a 16 44 9d 11 7d 8e 5b 04 35 03 65 aa 8f 17 41 cf 85 d0 2b 20 a0 08 43 27 69 db fe a3 7b 68 e6 e7 c5 52 f5 df d3 ff 2d ee Data Ascii: fv\|Z".CRSc\|1,}hiplX/IImhoy{!h?$p1`x"sY2_i{1`"U;OBYt+Vi9vga\|n8bZ-vasD+B+OS4#=1^=mD}[5eA+ C'i{hR-
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 02 1b 01 35 77 85 f7 a4 8f a2 c3 9f a5 ba ac a2 ba d9 ef 3c 92 46 25 5e 10 8f b1 a7 54 e2 45 f1 24 27 4a 25 46 c5 d3 a4 26 95 74 f0 e2 cc 0b ae 6c 83 09 b6 92 6a 3e 55 02 3d 08 ea 83 ba c0 51 dc 34 75 ba 96 fb 64 30 c8 32 ca b8 8f 89 52 ef 9f 7f 1f 91 49 55 1e bf 1d 82 e2 ce 0e 3a 07 d5 67 94 e6 31 b3 5a 08 68 71 68 29 bf 96 51 5e e5 85 42 45 e4 a6 cf 03 5f 20 14 f5 53 a4 fd 4e 0b 9a 34 83 f7 2d fb 93 af 33 89 c4 b3 4c 2a 8d 54 1e 54 54 d5 aa 4f 3d e8 a0 b0 20 28 d6 2b 6d ef 13 f8 e0 a3 4f 1a 9a 5a da 3a ba f5 fc fa 6e c1 8c df 00 26 95 f3 30 99 96 76 fb 0e 4c e1 4c ed 7f 27 6d 6b 77 ed 64 41 01 de 0e 93 95 3b e4 89 2f 10 8a 8a 4b 01 82 40 30 82 c6 88 33 c1 3a 51 ec 26 67 63 4c f3 40 3b 99 03 ab 18 00 ff 15 eb 26 b3 09 92 62 72 d4 67 8a 77 dc 99 9a f6 99 Data Ascii: 5w<F%^TE$'J%F&tlj>U=Q4ud02RIU:g1Zhqh)Q^BE_ SN4-3L*TTTO= (+mOZ:n&0vLL'mkwdA;/K@03:Q&gcL@;&brgw
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: da 8a 72 75 9b 44 67 93 a2 db b5 fb e6 d8 dc 61 1e f8 04 84 44 40 10 18 02 3d 6c e9 1b ae 69 e6 ec 56 3f 71 66 9a 3f fd 0a bb 88 6e 4a a3 a7 ca c8 db a3 1e 5e 2c 9a ae 4b bc ab b0 91 e8 b5 b0 99 f8 ae df 09 bc 36 30 95 d1 10 b5 0b ad 5e ac 11 d3 94 5c 2b 13 75 61 6a 39 5d 5e 5a a7 c6 ae c7 6e e2 ed e1 2c 6e da ee e9 55 ee 93 c1 20 cb 28 e3 3e ae 02 53 13 ea 16 5e e6 da 9f 9e 23 67 07 32 d3 12 f6 99 19 47 0b 13 2d aa a5 87 6c 99 f2 b9 42 45 72 77 ce 83 2f 10 8a fa a9 a3 12 ca 2a aa 6a d5 0f 14 34 08 46 d0 98 f5 0a 0d 4d 2d ed 3a d4 6d aa 17 eb 6b 59 c1 36 86 03 93 56 3f cb 72 bc 80 76 a9 de cb 7e 40 d7 79 17 8c ff 67 4c ef cb cd d6 ea bc d5 fc 5c 05 14 73 ab 79 f0 05 42 11 08 c1 08 6a 85 c3 cc eb c8 6b 98 b0 07 f3 62 b7 70 94 e8 16 1d 6f b7 ae 79 81 bb 45 Data Ascii: ruDgaD@=liV?qf?nJ^,K60^\+uaj9]^Zn,nU (>S^#g2G-lBErw/*j4FM-:mkY6V?rv~@ygL\syBjkbpoyE
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: b6 f2 37 e0 f8 f9 09 66 d1 30 c5 8a e6 f3 b7 21 9d 5d 61 5a 5f 3f ef db e0 e6 e7 98 45 95 99 cb b1 66 ef 2c 9f 1c bf 19 fd c6 b8 28 9e e7 f9 cf f7 c4 80 b5 28 3e 90 e2 63 bc f4 0b 76 4a f7 d0 01 00 20 96 cb 59 2d 8a 28 00 88 8a 22 2a 0a 58 87 96 24 49 b7 30 7c de 14 72 ac 8a 8a b9 a5 26 49 52 54 94 a2 a2 24 75 d9 6d c6 99 81 03 ca cb 02 b7 04 6f 6b 7a 60 f4 8d 3a 2b 67 a5 87 56 70 8a cb b2 cb 3c f0 09 08 89 80 20 30 04 7a 98 b7 28 dc 44 d4 95 9c 53 ae df 77 24 f6 86 72 6f 3d cf cc 10 bd e8 8f 8e c4 b5 2f 9e a3 cd 4f ac 00 c5 b9 a5 79 d8 9b 2f 10 8a 40 08 46 d0 8f ed 65 f0 6c 00 00 00 80 d8 f1 5d 3a 00 10 85 f0 55 14 49 92 24 49 32 76 4a bb 74 48 32 8a 51 51 dc 73 d1 48 92 24 49 92 94 76 4a bb 74 24 49 8a 52 54 54 94 f4 bf 8d fa df 99 a0 fb 03 24 66 76 f7 Data Ascii: 7f0!]aZ_?Ef,((>cvJ Y-("*X$I0\|r&IRT$umokz`:+gVp< 0z(DSw$ro=/Oy/@Fel]:UI$I2vJtH2QQsH$IvJt$IRTT$fv

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	2795	OUT	GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214271d6f-ba62-d045-549b-ab972ae1f70e%22%3A%2225%22%7D&beckyExperiments=.DatePickerPortal%2C.TextInputAutoFillFix%2C.WRichTextVerticalTextNowidth%2C.buttonUdp%2C.edixIsInFirstFold%2C.fetchBlocksDevCenterWidgetIds%2C.fiveGridLineStudioSkins%2C.fixDisabledLinkButtonStyles%2C.fixRatingsInputLeftShift%2C.minMaxInCheckboxGroup%2C.motionFeature%2C.removeHeaderFooterWrappers%2C.shouldUseResponsiveImages%2C.useInternalBlocksRefType%2C.useSvgLoaderFeature&blocksBuilderManifestGeneratorVersion=1.92.0&commonConfig=%7B%22siteRevision%22%3A%224%22%2C%22branchId%22%3A%22ef646ce2-92ab-4161-92ef-e1ed59caf7cf%22%7D&contentType=application%2Fjson&deviceType=Desktop&dfCk=6&dfVersion=1.4089.0&disableStaticPagesUrlHierarchy=false&editorName=Unknown&experiments=dm_deleteLayoutOverridesForRefComponents%2Cdm_fixAnchorUrlFragment%2Cdm_migrateOldHoverBoxToNewFixer%2Cdm_removeTpaChildren%2Cspecs.thunderbolt.use_data_ [TRUNCATED] Host: siteassets.parastorage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.atuiqe.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.atuiqe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:42:59 UTC	1295	IN	HTTP/1.1 200 OK Date: Fri, 08 Nov 2024 16:42:59 GMT Content-Type: application/json Vary: Accept-Encoding ETag: W/"1c175-PkBKW1OAMh+X6w5ALB3dVbnDwiQ" X-Wix-Request-Id: 1731084179.28438088790943536 Access-Control-Expose-Headers: age,via,x-cache-status,X-cache-status X-Varnish: 580561164 596943639 Via: 1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0), 1.1 google X-Varnish: 556995009 Server: Pepyaka/1.21.6 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-,x-wix-client-artifact-id X-Varnish: 525346846 Content-Length: 115061 X-Cluster-Self-Is-Next: false X-Varnish: 519302245 Age: 0 X-Cache-Status: HIT X-Seen-By: aVxMblM8KFG3we5NLvyVcySsg8L7vnWD28h/4/gKFeyj9dBflAyFvPAD2t41Gwlp Cache-Control: max-age=2419200 X-Cluster-Node-Role: proxy Accept-Ranges: bytes x-cache: miss glb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0= x-gcp-cdn-pop: DFW Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-08 16:42:59 UTC	83	IN	Data Raw: 7b 22 73 74 61 74 65 52 65 66 73 22 3a 7b 22 63 6f 6d 70 2d 6b 70 67 79 6b 6d 6c 79 22 3a 7b 22 63 75 72 72 65 6e 74 55 72 6c 22 3a 7b 22 24 74 79 70 65 22 3a 22 72 65 66 22 2c 22 72 65 66 50 61 74 68 22 3a 5b 22 65 78 70 6f 72 74 73 22 2c 22 72 6f Data Ascii: {"stateRefs":{"comp-kpgykmly":{"currentUrl":{"$type":"ref","refPath":["exports","ro
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 75 74 65 72 22 2c 22 63 75 72 72 65 6e 74 55 72 6c 22 5d 7d 7d 2c 22 63 6f 6d 70 2d 6d 31 76 66 67 77 37 34 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 24 74 79 70 65 22 3a 22 72 65 66 22 2c 22 72 65 66 50 61 74 68 22 3a 5b 22 65 78 70 6f 72 74 73 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 5d 7d 7d 2c 22 63 6f 6d 70 2d 6d 31 76 66 66 71 38 7a 22 3a 7b 22 63 75 72 72 65 6e 74 55 72 6c 22 3a 7b 22 24 74 79 70 65 22 3a 22 72 65 66 22 2c 22 72 65 66 50 61 74 68 22 3a 5b 22 65 78 70 6f 72 74 73 22 2c 22 72 6f 75 74 65 72 22 2c 22 63 75 72 72 65 6e 74 55 72 6c 22 5d 7d 2c 22 72 65 70 6f 72 74 42 69 22 3a 7b 22 24 74 79 70 65 22 3a 22 72 65 66 22 2c 22 72 65 66 50 61 74 68 22 3a 5b 22 65 78 70 6f 72 74 73 Data Ascii: uter","currentUrl"]}},"comp-m1vfgw74":{"experiments":{"$type":"ref","refPath":["exports","environment","experiments"]}},"comp-m1vffq8z":{"currentUrl":{"$type":"ref","refPath":["exports","router","currentUrl"]},"reportBi":{"$type":"ref","refPath":["exports
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 66 22 2c 22 72 65 66 50 61 74 68 22 3a 5b 22 65 78 70 6f 72 74 73 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 5d 7d 7d 2c 22 63 6f 6d 70 2d 6b 6f 77 78 71 6c 69 75 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 24 74 79 70 65 22 3a 22 72 65 66 22 2c 22 72 65 66 50 61 74 68 22 3a 5b 22 65 78 70 6f 72 74 73 22 2c 22 65 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 5d 7d 7d 2c 22 63 6f 6d 70 2d 6a 74 6f 30 31 6a 30 63 22 3a 7b 22 72 65 70 6f 72 74 42 69 22 3a 7b 22 24 74 79 70 65 22 3a 22 72 65 66 22 2c 22 72 65 66 50 61 74 68 22 3a 5b 22 65 78 70 6f 72 74 73 22 2c 22 62 75 73 69 6e 65 73 73 4c 6f 67 67 65 72 22 2c 22 72 65 70 6f 72 74 42 69 22 5d 7d 7d 2c 22 63 6f 6d 70 2d 6a Data Ascii: f","refPath":["exports","environment","experiments"]}},"comp-kowxqliu":{"experiments":{"$type":"ref","refPath":["exports","environment","experiments"]}},"comp-jto01j0c":{"reportBi":{"$type":"ref","refPath":["exports","businessLogger","reportBi"]}},"comp-j
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 67 65 22 2c 22 69 73 49 6e 53 6c 6f 74 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6d 70 2d 6b 6f 77 78 71 6c 69 75 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 57 52 69 63 68 54 65 78 74 22 2c 22 70 61 67 65 49 64 22 3a 22 6d 61 73 74 65 72 50 61 67 65 22 2c 22 69 73 49 6e 53 6c 6f 74 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6d 70 2d 6a 74 6f 30 31 6a 30 39 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 54 65 78 74 49 6e 70 75 74 22 2c 22 70 61 67 65 49 64 22 3a 22 6d 61 73 74 65 72 50 61 67 65 22 2c 22 69 73 49 6e 53 6c 6f 74 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6d 70 2d 6a 74 6f 30 31 6a 30 63 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 53 69 74 65 42 75 74 74 6f 6e 22 2c 22 75 69 54 79 70 65 22 3a 22 42 61 73 69 63 42 75 Data Ascii: ge","isInSlot":false},"comp-kowxqliu":{"componentType":"WRichText","pageId":"masterPage","isInSlot":false},"comp-jto01j09":{"componentType":"TextInput","pageId":"masterPage","isInSlot":false},"comp-jto01j0c":{"componentType":"SiteButton","uiType":"BasicBu
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 6f 6e 65 6e 74 54 79 70 65 22 3a 22 50 61 67 65 47 72 6f 75 70 22 2c 22 70 61 67 65 49 64 22 3a 22 6d 61 73 74 65 72 50 61 67 65 22 2c 22 69 73 49 6e 53 6c 6f 74 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6d 70 2d 6b 70 67 79 6b 6a 79 7a 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 73 22 3a 5b 5d 2c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 74 70 61 57 69 64 67 65 74 4e 61 74 69 76 65 22 2c 22 75 69 54 79 70 65 22 3a 22 31 34 63 65 66 63 30 35 2d 64 31 36 33 2d 64 62 62 37 2d 65 34 65 63 2d 63 64 34 66 32 63 34 64 36 64 64 64 22 2c 22 70 61 67 65 49 64 22 3a 22 6d 61 73 74 65 72 50 61 67 65 22 2c 22 69 73 49 6e 53 6c 6f 74 22 3a 66 61 6c 73 65 7d 2c 22 63 6f 6d 70 2d 6a 74 6f 30 31 69 6f 75 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 73 22 3a 5b 22 63 6f 6d 70 2d Data Ascii: onentType":"PageGroup","pageId":"masterPage","isInSlot":false},"comp-kpgykjyz":{"components":[],"componentType":"tpaWidgetNative","uiType":"14cefc05-d163-dbb7-e4ec-cd4f2c4d6ddd","pageId":"masterPage","isInSlot":false},"comp-jto01iou":{"components":["comp-
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 22 3a 5b 5d 2c 22 63 6f 6d 70 6f 6e 65 6e 74 54 79 70 65 22 3a 22 53 6b 69 70 54 6f 43 6f 6e 74 65 6e 74 42 75 74 74 6f 6e 22 2c 22 70 61 67 65 49 64 22 3a 22 6d 61 73 74 65 72 50 61 67 65 22 7d 7d 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 22 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 2c 22 61 63 74 69 76 65 50 6f 70 75 70 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 73 57 69 78 43 6f 64 65 53 64 6b 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 73 22 2c 22 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 57 69 78 43 6f 64 65 53 64 6b 22 2c 22 63 61 70 74 63 68 61 22 2c 22 63 6c 69 63 6b 48 61 6e 64 6c 65 72 52 65 67 69 73 74 72 61 72 22 2c 22 63 6f 6d 70 6f 6e 65 6e 74 73 22 2c 22 63 6f 6e 73 65 6e 74 50 6f 6c 69 63 79 22 2c 22 66 65 64 6f 70 73 57 69 78 43 6f 64 65 53 64 6b 22 2c 22 Data Ascii: ":[],"componentType":"SkipToContentButton","pageId":"masterPage"}},"features":["accessibility","activePopup","animationsWixCodeSdk","animations","authenticationWixCodeSdk","captcha","clickHandlerRegistrar","components","consentPolicy","fedopsWixCodeSdk","
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 63 6b 73 22 3a 22 61 64 6f 62 65 2d 63 61 73 6c 6f 6e 2d 77 30 38 2d 73 6d 62 64 22 2c 22 73 70 72 69 74 65 49 6e 64 65 78 22 3a 32 31 39 2c 22 63 73 73 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 61 64 6f 62 65 2d 63 61 73 6c 6f 6e 2d 77 30 31 2d 73 6d 62 64 2c 61 64 6f 62 65 2d 63 61 73 6c 6f 6e 2d 77 30 38 2d 73 6d 62 64 2c 73 65 72 69 66 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 6d 61 74 69 63 20 53 43 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 61 6d 61 74 69 63 20 73 63 22 2c 22 63 64 6e 4e 61 6d 65 22 3a 22 41 6d 61 74 69 63 2b 53 43 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 63 75 72 73 69 76 65 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 67 6f 6f 67 6c 65 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c Data Ascii: cks":"adobe-caslon-w08-smbd","spriteIndex":219,"cssFontFamily":"adobe-caslon-w01-smbd,adobe-caslon-w08-smbd,serif"},{"displayName":"Amatic SC","fontFamily":"amatic sc","cdnName":"Amatic+SC","genericFamily":"cursive","provider":"google","characterSets":["l
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 73 79 73 74 65 6d 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c 61 74 69 6e 22 2c 22 6c 61 74 69 6e 2d 65 78 74 22 2c 22 63 79 72 69 6c 6c 69 63 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 61 6c 6c 22 2c 22 66 61 6c 6c 62 61 63 6b 73 22 3a 22 61 72 69 61 6c 2d 77 30 31 2d 62 6c 61 63 6b 2c 61 72 69 61 6c 2d 77 30 32 2d 62 6c 61 63 6b 2c 61 72 69 61 6c 2d 77 31 30 20 62 6c 61 63 6b 22 2c 22 73 70 72 69 74 65 49 6e 64 65 78 22 3a 31 32 2c 22 63 73 73 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 61 72 69 61 6c 20 62 6c 61 63 6b 2c 61 72 69 61 6c 2d 77 30 31 2d 62 6c 61 63 6b 2c 61 72 69 61 6c 2d 77 30 32 2d 62 Data Ascii: ","genericFamily":"sans-serif","provider":"system","characterSets":["latin","latin-ext","cyrillic"],"permissions":"all","fallbacks":"arial-w01-black,arial-w02-black,arial-w10 black","spriteIndex":12,"cssFontFamily":"arial black,arial-w01-black,arial-w02-b
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 69 6c 79 22 3a 22 61 76 65 6e 69 72 2d 6c 74 2d 77 30 31 5f 38 35 2d 68 65 61 76 79 31 34 37 35 35 34 34 2c 61 76 65 6e 69 72 2d 6c 74 2d 77 30 35 5f 38 35 2d 68 65 61 76 79 2c 73 61 6e 73 2d 73 65 72 69 66 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 76 65 6e 69 72 20 4c 69 67 68 74 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 61 76 65 6e 69 72 2d 6c 74 2d 77 30 31 5f 33 35 2d 6c 69 67 68 74 31 34 37 35 34 39 36 22 2c 22 63 64 6e 4e 61 6d 65 22 3a 22 22 2c 22 67 65 6e 65 72 69 63 46 61 6d 69 6c 79 22 3a 22 73 61 6e 73 2d 73 65 72 69 66 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 6d 6f 6e 6f 74 79 70 65 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c 61 74 69 6e 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 61 6c 6c Data Ascii: ily":"avenir-lt-w01_85-heavy1475544,avenir-lt-w05_85-heavy,sans-serif"},{"displayName":"Avenir Light","fontFamily":"avenir-lt-w01_35-light1475496","cdnName":"","genericFamily":"sans-serif","provider":"monotype","characterSets":["latin"],"permissions":"all
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 2d 73 65 72 69 66 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 67 6f 6f 67 6c 65 2d 73 65 6c 66 2d 68 6f 73 74 65 64 22 2c 22 63 68 61 72 61 63 74 65 72 53 65 74 73 22 3a 5b 22 6c 61 74 69 6e 22 2c 22 6c 61 74 69 6e 2d 65 78 74 22 5d 2c 22 70 65 72 6d 69 73 73 69 6f 6e 73 22 3a 22 61 6c 6c 22 2c 22 66 61 6c 6c 62 61 63 6b 73 22 3a 22 62 61 72 6c 6f 77 22 2c 22 73 70 72 69 74 65 49 6e 64 65 78 22 3a 32 33 39 2c 22 63 73 73 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 62 61 72 6c 6f 77 2d 65 78 74 72 61 6c 69 67 68 74 2c 62 61 72 6c 6f 77 2c 73 61 6e 73 2d 73 65 72 69 66 22 7d 2c 7b 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 42 61 72 6c 6f 77 20 4d 65 64 69 75 6d 22 2c 22 66 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 62 61 72 6c 6f 77 2d 6d 65 64 69 75 6d 22 2c 22 63 64 Data Ascii: -serif","provider":"google-self-hosted","characterSets":["latin","latin-ext"],"permissions":"all","fallbacks":"barlow","spriteIndex":239,"cssFontFamily":"barlow-extralight,barlow,sans-serif"},{"displayName":"Barlow Medium","fontFamily":"barlow-medium","cd

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	726	OUT	GET /_api/v1/access-tokens HTTP/1.1 Host: www.atuiqe.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.atuiqe.com/?utm_campaign=0f81509a-62f1-47e2-a888-d5be8e836699&utm_source=so&utm_medium=mail&cid=a6d855b2-881c-48d2-bb00-0c3ada297a56 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssr-caching=cache#desc=miss#varnish=miss_miss#dc#desc=fastly_42_g
2024-11-08 16:42:59 UTC	1597	IN	HTTP/1.1 200 OK Content-Length: 31445 Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=86400 Age: 71606 Accept-Ranges: bytes X-Wix-Request-Id: 1731084179.300234901321594025189 Set-Cookie: XSRF-TOKEN=1731084179\|f1vB8wlzqJoO; Path=/; Domain=www.atuiqe.com; Secure; SameSite=None Set-Cookie: hs=2049917708; Path=/; Domain=www.atuiqe.com; Secure; HTTPOnly Set-Cookie: svSession=701cfbb69ad3f90d06ef93ef884708f851f4bc52124749f64f8390db3a2df43a1bd32da7fd33f4715d3c419a540b21c41e60994d53964e647acf431e4f798bcd79c46d3f58de13bde0656bb4e6f597f022d4e84b314762f2f16cfef30f1811b451d033e5212746cd22b913f0a52148842c1436a49f9b2c6c6db91cf62ffb96bee91590c78fc192b5a3495045ab504ed1; Max-Age=63071999; Expires=Sun, 08 Nov 2026 16:42:58 GMT; Path=/; Domain=www.atuiqe.com; Secure; HTTPOnly; SameSite=None Cache-Control: private,no-cache,no-store Server: Pepyaka X-Content-Type-Options: nosniff Date: Fri, 08 Nov 2024 16:42:59 GMT X-Served-By: cache-dfw-kdfw8210047-DFW X-Cache: MISS Vary: Accept-Encoding Server-Timing: cache;desc=hit, varnish;desc=hit_miss, dc;desc=fastly_42_g X-Seen-By: yvSunuo/8ld62ehjr5B7kA==,pmHZlB45NPy7b1VBAukQrewfbs+7qUVAqsIx00yI78k=,m0j2EEknGIVUW/liY8BLLlPVSO1QPQ7KlY+JzrfjmCLV0TBmJ+uLPQ4OZPC1VSMH,2d58ifebGbosy5xc+FRalu9XHqYcJB8DxS60s643DTJaqB5tuKFGSVrDqAuMhg8QEjssg3Ajcaq6icw9t1ubVQ==,2UNV7KOq4oGjA5+PKsX47HLFaI6iNJWKbgg2rxnh6ipYgeUJqUXtid+86vZww+nL Via: 1.1 google glb-x-seen-by: bS8wRlGzu0Hc+WrYuHB8QIg44yfcdCMJRkBoQ1h6Vjc= Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-08 16:42:59 UTC	1597	IN	Data Raw: 7b 22 68 73 22 3a 32 30 34 39 39 31 37 37 30 38 2c 22 76 69 73 69 74 6f 72 49 64 22 3a 22 33 39 63 34 62 30 36 39 2d 66 66 66 32 2d 34 38 37 38 2d 62 37 39 66 2d 64 64 66 37 64 61 37 35 62 64 66 36 22 2c 22 73 76 53 65 73 73 69 6f 6e 22 3a 22 37 30 31 63 66 62 62 36 39 61 64 33 66 39 30 64 30 36 65 66 39 33 65 66 38 38 34 37 30 38 66 38 35 31 66 34 62 63 35 32 31 32 34 37 34 39 66 36 34 66 38 33 39 30 64 62 33 61 32 64 66 34 33 61 31 62 64 33 32 64 61 37 66 64 33 33 66 34 37 31 35 64 33 63 34 31 39 61 35 34 30 62 32 31 63 34 31 65 36 30 39 39 34 64 35 33 39 36 34 65 36 34 37 61 63 66 34 33 31 65 34 66 37 39 38 62 63 64 37 39 63 34 36 64 33 66 35 38 64 65 31 33 62 64 65 30 36 35 36 62 62 34 65 36 66 35 39 37 66 30 32 32 64 34 65 38 34 62 33 31 34 37 36 32 Data Ascii: {"hs":2049917708,"visitorId":"39c4b069-fff2-4878-b79f-ddf7da75bdf6","svSession":"701cfbb69ad3f90d06ef93ef884708f851f4bc52124749f64f8390db3a2df43a1bd32da7fd33f4715d3c419a540b21c41e60994d53964e647acf431e4f798bcd79c46d3f58de13bde0656bb4e6f597f022d4e84b314762
2024-11-08 16:42:59 UTC	1597	IN	Data Raw: 49 74 4e 44 4d 78 5a 43 31 69 5a 57 45 35 4c 54 52 6c 4d 32 59 31 4e 7a 51 78 59 7a 59 35 4d 53 4a 39 22 2c 22 69 6e 74 49 64 22 3a 34 31 7d 2c 22 38 37 32 35 62 32 35 35 2d 32 61 61 32 2d 34 61 35 33 2d 62 37 36 64 2d 37 64 33 63 33 36 33 61 61 65 65 61 22 3a 7b 22 69 6e 73 74 61 6e 63 65 22 3a 22 66 42 62 59 41 38 78 35 6a 78 68 6c 4d 61 72 4c 62 36 76 35 69 34 76 73 59 64 48 49 6d 79 53 2d 70 4a 6e 6b 37 45 38 38 41 50 49 2e 65 79 4a 70 62 6e 4e 30 59 57 35 6a 5a 55 6c 6b 49 6a 6f 69 4d 6d 55 7a 4d 6a 49 78 4d 44 51 74 5a 54 4d 30 4d 69 30 30 4d 32 4e 68 4c 57 45 79 4e 6a 41 74 59 7a 51 7a 59 57 4d 78 4d 6a 67 30 59 6a 51 30 49 69 77 69 59 58 42 77 52 47 56 6d 53 57 51 69 4f 69 49 34 4e 7a 49 31 59 6a 49 31 4e 53 30 79 59 57 45 79 4c 54 52 68 4e 54 4d Data Ascii: ItNDMxZC1iZWE5LTRlM2Y1NzQxYzY5MSJ9","intId":41},"8725b255-2aa2-4a53-b76d-7d3c363aaeea":{"instance":"fBbYA8x5jxhlMarLb6v5i4vsYdHImyS-pJnk7E88API.eyJpbnN0YW5jZUlkIjoiMmUzMjIxMDQtZTM0Mi00M2NhLWEyNjAtYzQzYWMxMjg0YjQ0IiwiYXBwRGVmSWQiOiI4NzI1YjI1NS0yYWEyLTRhNTM
2024-11-08 16:42:59 UTC	1597	IN	Data Raw: 46 6c 4d 57 59 33 4d 47 55 69 4c 43 4a 74 5a 58 52 68 55 32 6c 30 5a 55 6c 6b 49 6a 6f 69 59 6d 55 7a 59 32 56 6c 4e 6a 59 74 4e 6a 68 6a 4e 79 30 30 5a 44 49 78 4c 57 4a 6c 4e 7a 63 74 59 6d 4a 6c 59 57 56 6a 59 6d 51 7a 5a 6d 4d 35 49 69 77 69 63 32 6c 6e 62 6b 52 68 64 47 55 69 4f 69 49 79 4d 44 49 30 4c 54 45 78 4c 54 41 34 56 44 45 32 4f 6a 51 79 4f 6a 55 35 4c 6a 4d 78 4e 46 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 39 79 61 57 64 70 62 6b 6c 75 63 33 52 68 62 6d 4e 6c 53 57 51 69 4f 69 49 30 4d 57 49 30 4d 44 6b 33 5a 53 31 68 4e 32 45 35 4c 54 51 79 59 57 49 74 4f 57 45 30 4d 79 31 6d 4f 47 51 30 5a 44 6c 6b 4d 47 49 79 4f 44 4d 69 4c 43 4a 68 61 57 51 69 4f 69 49 7a 4f 57 4d 30 59 6a 41 32 4f 53 31 6d 5a Data Ascii: FlMWY3MGUiLCJtZXRhU2l0ZUlkIjoiYmUzY2VlNjYtNjhjNy00ZDIxLWJlNzctYmJlYWVjYmQzZmM5Iiwic2lnbkRhdGUiOiIyMDI0LTExLTA4VDE2OjQyOjU5LjMxNFoiLCJkZW1vTW9kZSI6ZmFsc2UsIm9yaWdpbkluc3RhbmNlSWQiOiI0MWI0MDk3ZS1hN2E5LTQyYWItOWE0My1mOGQ0ZDlkMGIyODMiLCJhaWQiOiIzOWM0YjA2OS1mZ
2024-11-08 16:42:59 UTC	721	IN	Data Raw: 6c 6d 4e 6a 68 69 5a 44 41 69 4c 43 4a 7a 61 58 52 6c 54 33 64 75 5a 58 4a 4a 5a 43 49 36 49 6a 45 34 5a 44 55 32 5a 6a 56 68 4c 57 59 35 5a 44 49 74 4e 44 4d 78 5a 43 31 69 5a 57 45 35 4c 54 52 6c 4d 32 59 31 4e 7a 51 78 59 7a 59 35 4d 53 4a 39 22 2c 22 69 6e 74 49 64 22 3a 34 30 7d 2c 22 32 62 65 66 32 61 62 65 2d 37 61 62 65 2d 34 33 64 61 2d 38 38 39 63 2d 35 33 63 31 35 30 30 61 33 32 38 63 22 3a 7b 22 69 6e 73 74 61 6e 63 65 22 3a 22 4e 59 51 6d 70 6c 36 32 69 58 66 34 31 58 46 39 74 33 6e 77 62 37 36 33 34 70 73 32 6a 6c 34 74 33 41 33 4a 56 6e 2d 6f 74 52 6b 2e 65 79 4a 70 62 6e 4e 30 59 57 35 6a 5a 55 6c 6b 49 6a 6f 69 4d 47 4a 6a 4f 47 49 77 5a 54 59 74 4d 44 68 6a 4e 53 30 30 4e 47 4d 30 4c 57 46 6c 4e 6a 49 74 4e 6d 52 6a 4f 44 6c 6a 4e 7a 67 Data Ascii: lmNjhiZDAiLCJzaXRlT3duZXJJZCI6IjE4ZDU2ZjVhLWY5ZDItNDMxZC1iZWE5LTRlM2Y1NzQxYzY5MSJ9","intId":40},"2bef2abe-7abe-43da-889c-53c1500a328c":{"instance":"NYQmpl62iXf41XF9t3nwb7634ps2jl4t3A3JVn-otRk.eyJpbnN0YW5jZUlkIjoiMGJjOGIwZTYtMDhjNS00NGM0LWFlNjItNmRjODljNzg
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 65 22 3a 7b 22 69 6e 73 74 61 6e 63 65 22 3a 22 69 5f 77 75 4a 4c 65 57 63 5a 74 4c 5a 51 37 6b 59 68 50 4a 4c 69 50 6b 6b 5a 6d 36 70 36 6d 6a 6d 76 41 6c 33 71 65 4a 42 61 6f 2e 65 79 4a 70 62 6e 4e 30 59 57 35 6a 5a 55 6c 6b 49 6a 6f 69 5a 44 55 77 4d 54 41 79 4e 6d 55 74 5a 6a 6c 6c 4d 79 30 30 59 32 4e 6c 4c 57 45 78 59 54 6b 74 4d 54 63 33 4e 54 5a 69 4e 44 4d 78 5a 6a 41 77 49 69 77 69 59 58 42 77 52 47 56 6d 53 57 51 69 4f 69 4a 6b 4e 7a 42 69 4e 6a 68 6c 4d 69 30 34 5a 44 63 33 4c 54 52 6c 4d 47 4d 74 4f 57 4d 77 4d 43 31 6a 4d 6a 6b 79 5a 44 5a 6c 4d 44 41 79 4e 57 55 69 4c 43 4a 74 5a 58 52 68 55 32 6c 30 5a 55 6c 6b 49 6a 6f 69 59 6d 55 7a 59 32 56 6c 4e 6a 59 74 4e 6a 68 6a 4e 79 30 30 5a 44 49 78 4c 57 4a 6c 4e 7a 63 74 59 6d 4a 6c 59 57 56 Data Ascii: e":{"instance":"i_wuJLeWcZtLZQ7kYhPJLiPkkZm6p6mjmvAl3qeJBao.eyJpbnN0YW5jZUlkIjoiZDUwMTAyNmUtZjllMy00Y2NlLWExYTktMTc3NTZiNDMxZjAwIiwiYXBwRGVmSWQiOiJkNzBiNjhlMi04ZDc3LTRlMGMtOWMwMC1jMjkyZDZlMDAyNWUiLCJtZXRhU2l0ZUlkIjoiYmUzY2VlNjYtNjhjNy00ZDIxLWJlNzctYmJlYWV
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 31 64 5f 47 4b 62 7a 2d 5a 4d 49 2e 65 79 4a 70 62 6e 4e 30 59 57 35 6a 5a 55 6c 6b 49 6a 6f 69 4e 32 51 34 4e 7a 67 79 4d 57 51 74 5a 44 55 35 59 53 30 30 4e 6a 4a 6d 4c 57 46 6c 4d 44 59 74 4f 44 49 34 4e 57 51 33 4e 54 4d 34 5a 57 4d 35 49 69 77 69 59 58 42 77 52 47 56 6d 53 57 51 69 4f 69 49 78 4e 44 5a 6a 4d 47 51 33 4d 53 30 7a 4e 54 4a 6c 4c 54 51 30 4e 6a 51 74 4f 57 45 77 4d 79 30 79 5a 54 67 32 4f 47 46 68 59 6d 55 33 59 6a 6b 69 4c 43 4a 74 5a 58 52 68 55 32 6c 30 5a 55 6c 6b 49 6a 6f 69 59 6d 55 7a 59 32 56 6c 4e 6a 59 74 4e 6a 68 6a 4e 79 30 30 5a 44 49 78 4c 57 4a 6c 4e 7a 63 74 59 6d 4a 6c 59 57 56 6a 59 6d 51 7a 5a 6d 4d 35 49 69 77 69 63 32 6c 6e 62 6b 52 68 64 47 55 69 4f 69 49 79 4d 44 49 30 4c 54 45 78 4c 54 41 34 56 44 45 32 4f 6a 51 Data Ascii: 1d_GKbz-ZMI.eyJpbnN0YW5jZUlkIjoiN2Q4NzgyMWQtZDU5YS00NjJmLWFlMDYtODI4NWQ3NTM4ZWM5IiwiYXBwRGVmSWQiOiIxNDZjMGQ3MS0zNTJlLTQ0NjQtOWEwMy0yZTg2OGFhYmU3YjkiLCJtZXRhU2l0ZUlkIjoiYmUzY2VlNjYtNjhjNy00ZDIxLWJlNzctYmJlYWVjYmQzZmM5Iiwic2lnbkRhdGUiOiIyMDI0LTExLTA4VDE2OjQ
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 7a 4d 53 30 30 4e 6a 4d 77 4c 54 67 7a 59 57 51 74 4e 7a 45 33 4e 54 4e 6c 4d 44 64 6c 4e 7a 67 32 49 69 77 69 59 58 42 77 52 47 56 6d 53 57 51 69 4f 69 49 7a 4d 44 64 69 59 54 6b 7a 4d 53 30 32 4f 44 6c 6a 4c 54 52 69 4e 54 55 74 59 6d 49 78 5a 43 30 32 59 54 4d 34 4d 6d 4a 68 5a 44 6b 79 4d 6a 49 69 4c 43 4a 74 5a 58 52 68 55 32 6c 30 5a 55 6c 6b 49 6a 6f 69 59 6d 55 7a 59 32 56 6c 4e 6a 59 74 4e 6a 68 6a 4e 79 30 30 5a 44 49 78 4c 57 4a 6c 4e 7a 63 74 59 6d 4a 6c 59 57 56 6a 59 6d 51 7a 5a 6d 4d 35 49 69 77 69 63 32 6c 6e 62 6b 52 68 64 47 55 69 4f 69 49 79 4d 44 49 30 4c 54 45 78 4c 54 41 34 56 44 45 32 4f 6a 51 79 4f 6a 55 35 4c 6a 4d 78 4e 46 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 39 79 61 57 64 70 62 6b Data Ascii: zMS00NjMwLTgzYWQtNzE3NTNlMDdlNzg2IiwiYXBwRGVmSWQiOiIzMDdiYTkzMS02ODljLTRiNTUtYmIxZC02YTM4MmJhZDkyMjIiLCJtZXRhU2l0ZUlkIjoiYmUzY2VlNjYtNjhjNy00ZDIxLWJlNzctYmJlYWVjYmQzZmM5Iiwic2lnbkRhdGUiOiIyMDI0LTExLTA4VDE2OjQyOjU5LjMxNFoiLCJkZW1vTW9kZSI6ZmFsc2UsIm9yaWdpbk
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 69 49 30 59 6a 45 77 5a 6d 4e 6a 5a 53 30 33 4d 7a 4a 6b 4c 54 52 69 5a 54 4d 74 4f 57 51 30 4e 69 30 34 4d 44 46 6b 4d 6a 63 78 59 57 4e 6b 59 54 6b 69 4c 43 4a 74 5a 58 52 68 55 32 6c 30 5a 55 6c 6b 49 6a 6f 69 59 6d 55 7a 59 32 56 6c 4e 6a 59 74 4e 6a 68 6a 4e 79 30 30 5a 44 49 78 4c 57 4a 6c 4e 7a 63 74 59 6d 4a 6c 59 57 56 6a 59 6d 51 7a 5a 6d 4d 35 49 69 77 69 63 32 6c 6e 62 6b 52 68 64 47 55 69 4f 69 49 79 4d 44 49 30 4c 54 45 78 4c 54 41 34 56 44 45 32 4f 6a 51 79 4f 6a 55 35 4c 6a 4d 78 4e 46 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 39 79 61 57 64 70 62 6b 6c 75 63 33 52 68 62 6d 4e 6c 53 57 51 69 4f 69 49 35 4d 54 63 33 59 6a 56 6b 4d 53 30 79 4d 32 45 33 4c 54 52 6d 59 6d 51 74 4f 47 59 34 4f 53 30 33 Data Ascii: iI0YjEwZmNjZS03MzJkLTRiZTMtOWQ0Ni04MDFkMjcxYWNkYTkiLCJtZXRhU2l0ZUlkIjoiYmUzY2VlNjYtNjhjNy00ZDIxLWJlNzctYmJlYWVjYmQzZmM5Iiwic2lnbkRhdGUiOiIyMDI0LTExLTA4VDE2OjQyOjU5LjMxNFoiLCJkZW1vTW9kZSI6ZmFsc2UsIm9yaWdpbkluc3RhbmNlSWQiOiI5MTc3YjVkMS0yM2E3LTRmYmQtOGY4OS03
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 6b 52 68 64 47 55 69 4f 69 49 79 4d 44 49 30 4c 54 45 78 4c 54 41 34 56 44 45 32 4f 6a 51 79 4f 6a 55 35 4c 6a 4d 78 4e 46 6f 69 4c 43 4a 6b 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 39 79 61 57 64 70 62 6b 6c 75 63 33 52 68 62 6d 4e 6c 53 57 51 69 4f 69 4a 68 4d 47 52 6a 5a 57 55 79 4e 79 31 6a 4d 32 55 78 4c 54 51 33 59 32 49 74 4f 47 59 34 4d 79 30 7a 59 57 55 32 4e 7a 4e 6b 4f 44 55 32 4f 54 41 69 4c 43 4a 68 61 57 51 69 4f 69 49 7a 4f 57 4d 30 59 6a 41 32 4f 53 31 6d 5a 6d 59 79 4c 54 51 34 4e 7a 67 74 59 6a 63 35 5a 69 31 6b 5a 47 59 33 5a 47 45 33 4e 57 4a 6b 5a 6a 59 69 4c 43 4a 69 61 56 52 76 61 32 56 75 49 6a 6f 69 59 32 59 30 4d 7a 55 31 4f 47 59 74 4d 54 64 6b 5a 43 30 77 4e 6a 67 78 4c 54 4a 69 4d 7a 6b 74 4e 6a 64 6a Data Ascii: kRhdGUiOiIyMDI0LTExLTA4VDE2OjQyOjU5LjMxNFoiLCJkZW1vTW9kZSI6ZmFsc2UsIm9yaWdpbkluc3RhbmNlSWQiOiJhMGRjZWUyNy1jM2UxLTQ3Y2ItOGY4My0zYWU2NzNkODU2OTAiLCJhaWQiOiIzOWM0YjA2OS1mZmYyLTQ4NzgtYjc5Zi1kZGY3ZGE3NWJkZjYiLCJiaVRva2VuIjoiY2Y0MzU1OGYtMTdkZC0wNjgxLTJiMzktNjdj
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 5a 57 31 76 54 57 39 6b 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 46 70 5a 43 49 36 49 6a 4d 35 59 7a 52 69 4d 44 59 35 4c 57 5a 6d 5a 6a 49 74 4e 44 67 33 4f 43 31 69 4e 7a 6c 6d 4c 57 52 6b 5a 6a 64 6b 59 54 63 31 59 6d 52 6d 4e 69 49 73 49 6d 4a 70 56 47 39 72 5a 57 34 69 4f 69 49 31 4e 47 55 78 4e 54 6c 6a 59 79 30 77 4d 47 5a 6d 4c 54 42 68 4e 6a 49 74 4d 54 49 34 4e 79 31 6d 59 6a 63 78 4f 47 4d 32 4e 7a 59 32 4e 32 45 69 4c 43 4a 7a 61 58 52 6c 54 33 64 75 5a 58 4a 4a 5a 43 49 36 49 6a 45 34 5a 44 55 32 5a 6a 56 68 4c 57 59 35 5a 44 49 74 4e 44 4d 78 5a 43 31 69 5a 57 45 35 4c 54 52 6c 4d 32 59 31 4e 7a 51 78 59 7a 59 35 4d 53 4a 39 22 2c 22 69 6e 74 49 64 22 3a 33 36 7d 2c 22 31 34 62 38 39 36 38 38 2d 39 62 32 35 2d 35 32 31 34 2d 64 31 63 62 2d Data Ascii: ZW1vTW9kZSI6ZmFsc2UsImFpZCI6IjM5YzRiMDY5LWZmZjItNDg3OC1iNzlmLWRkZjdkYTc1YmRmNiIsImJpVG9rZW4iOiI1NGUxNTljYy0wMGZmLTBhNjItMTI4Ny1mYjcxOGM2NzY2N2EiLCJzaXRlT3duZXJJZCI6IjE4ZDU2ZjVhLWY5ZDItNDMxZC1iZWE5LTRlM2Y1NzQxYzY5MSJ9","intId":36},"14b89688-9b25-5214-d1cb-

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	2513	OUT	GET /pages/pages/thunderbolt?appDefinitionIdToSiteRevision=%7B%2213d21c63-b5ec-5912-8397-c3a5ddb27a97%22%3A%22440%22%2C%2214271d6f-ba62-d045-549b-ab972ae1f70e%22%3A%2225%22%7D&beckyExperiments=.DatePickerPortal%2C.TextInputAutoFillFix%2C.WRichTextVerticalTextNowidth%2C.buttonUdp%2C.edixIsInFirstFold%2C.fetchBlocksDevCenterWidgetIds%2C.fiveGridLineStudioSkins%2C.fixDisabledLinkButtonStyles%2C.fixRatingsInputLeftShift%2C.minMaxInCheckboxGroup%2C.useInternalBlocksRefType&blocksBuilderManifestGeneratorVersion=1.92.0&commonConfig=%7B%22siteRevision%22%3A%224%22%2C%22branchId%22%3A%22ef646ce2-92ab-4161-92ef-e1ed59caf7cf%22%7D&contentType=application%2Fjson&dfCk=6&dfVersion=1.4089.0&editorName=Unknown&experiments=dm_deleteLayoutOverridesForRefComponents%2Cdm_fixAnchorUrlFragment%2Cdm_migrateOldHoverBoxToNewFixer%2Cdm_removeTpaChildren%2Cspecs.thunderbolt.use_data_fixed_pages_upstream&externalBaseUrl=https%3A%2F%2Fwww.atuiqe.com&fileId=4ad597a6.bundle.min&formFactor=desktop&hasTPAWorkerOnSite=false&isHttps=true&isInS [TRUNCATED] Host: siteassets.parastorage.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.atuiqe.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.atuiqe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:42:59 UTC	1292	IN	HTTP/1.1 200 OK Date: Fri, 08 Nov 2024 16:42:59 GMT Content-Type: application/json Vary: Accept-Encoding ETag: W/"393b-Ipbjb0GRzkHCxMuez4vlWmlvjJk" X-Wix-Request-Id: 1731084179.32250950029744207 Access-Control-Expose-Headers: age,via,x-cache-status,X-cache-status X-Varnish: 525593146 65866298 Via: 1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0), 1.1 google X-Varnish: 352709132 Server: Pepyaka/1.21.6 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS, POST Access-Control-Allow-Headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-,x-wix-client-artifact-id X-Varnish: 454126993 Content-Length: 14651 X-Cluster-Self-Is-Next: false X-Varnish: 523482137 Age: 0 X-Cache-Status: HIT X-Seen-By: aVxMblM8KFG3we5NLvyVc22LT0CNhTQaf1wp1orybcx+gjvpqAT/lOYBX1F4D8EW Cache-Control: max-age=2419200 X-Cluster-Node-Role: proxy Accept-Ranges: bytes x-cache: miss glb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0= x-gcp-cdn-pop: DFW Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-08 16:42:59 UTC	86	IN	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 7b 22 31 34 63 63 35 39 62 63 2d 66 30 62 37 2d 31 35 62 38 2d 65 31 63 37 2d 38 39 63 65 34 31 64 30 65 30 63 39 22 3a 7b 22 43 4f 4e 54 52 4f 4c 4c 45 52 5f 43 4f 4d 50 5f 43 55 53 54 4f 4d 5f 49 44 22 3a 7b Data Ascii: {"applications":{"14cc59bc-f0b7-15b8-e1c7-89ce41d0e0c9":{"CONTROLLER_COMP_CUSTOM_ID":{
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 22 63 6f 6d 70 49 64 22 3a 22 43 4f 4e 54 52 4f 4c 4c 45 52 5f 43 4f 4d 50 5f 43 55 53 54 4f 4d 5f 49 44 22 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 54 79 70 65 22 3a 22 6d 65 6d 62 65 72 73 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 49 64 22 3a 22 31 34 63 63 35 39 62 63 2d 66 30 62 37 2d 31 35 62 38 2d 65 31 63 37 2d 38 39 63 65 34 31 64 30 65 30 63 39 22 2c 22 61 70 70 44 65 66 69 6e 69 74 69 6f 6e 49 64 22 3a 22 31 34 63 63 35 39 62 63 2d 66 30 62 37 2d 31 35 62 38 2d 65 31 63 37 2d 38 39 63 65 34 31 64 30 65 30 63 39 22 7d 7d 2c 22 31 34 63 65 31 32 31 34 2d 62 32 37 38 2d 61 37 65 34 2d 31 33 37 33 2d 30 30 63 65 62 64 31 62 65 66 37 63 22 3a 7b 22 63 6f 6d 70 2d 6a 74 6f 30 31 69 6f 75 22 3a 7b 22 63 6f 6d 70 49 64 22 3a 22 63 6f 6d 70 2d 6a 74 6f 30 31 Data Ascii: "compId":"CONTROLLER_COMP_CUSTOM_ID","controllerType":"members","applicationId":"14cc59bc-f0b7-15b8-e1c7-89ce41d0e0c9","appDefinitionId":"14cc59bc-f0b7-15b8-e1c7-89ce41d0e0c9"}},"14ce1214-b278-a7e4-1373-00cebd1bef7c":{"comp-jto01iou":{"compId":"comp-jto01
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 63 6f 6d 70 2d 6a 74 6f 30 31 6a 30 39 22 2c 22 72 6f 6c 65 22 3a 22 69 6e 70 75 74 31 22 7d 5d 2c 22 62 75 74 74 6f 6e 31 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 63 6f 6d 70 2d 6a 74 6f 30 31 6a 30 63 22 2c 22 72 6f 6c 65 22 3a 22 62 75 74 74 6f 6e 31 22 7d 5d 2c 22 74 65 78 74 31 38 30 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 63 6f 6d 70 2d 6a 74 6f 30 31 6a 30 66 22 2c 22 72 6f 6c 65 22 3a 22 74 65 78 74 31 38 30 22 7d 5d 2c 22 68 65 61 64 65 72 31 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 53 49 54 45 5f 48 45 41 44 45 52 22 2c 22 72 6f 6c 65 22 3a 22 68 65 61 64 65 72 31 22 7d 5d 2c 22 70 61 67 65 73 43 6f 6e 74 61 69 6e 65 72 31 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 50 41 47 45 53 5f 43 4f 4e 54 41 49 Data Ascii: ":[{"compId":"comp-jto01j09","role":"input1"}],"button1":[{"compId":"comp-jto01j0c","role":"button1"}],"text180":[{"compId":"comp-jto01j0f","role":"text180"}],"header1":[{"compId":"SITE_HEADER","role":"header1"}],"pagesContainer1":[{"compId":"PAGES_CONTAI
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 66 69 67 22 3a 7b 22 63 6f 6c 6c 65 63 74 69 6f 6e 46 69 65 6c 64 4b 65 79 22 3a 22 22 7d 7d 5d 2c 22 6d 65 73 73 61 67 65 5f 52 6f 6c 65 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 63 6f 6d 70 2d 6a 74 6f 30 31 6a 30 66 22 2c 22 72 6f 6c 65 22 3a 22 6d 65 73 73 61 67 65 5f 52 6f 6c 65 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 63 6f 6c 6c 65 63 74 69 6f 6e 46 69 65 6c 64 4b 65 79 22 3a 22 22 7d 7d 5d 2c 22 66 6f 72 6d 5f 52 6f 6c 65 22 3a 5b 7b 22 63 6f 6d 70 49 64 22 3a 22 63 6f 6d 70 2d 6a 74 6f 30 31 69 71 6b 22 2c 22 72 6f 6c 65 22 3a 22 66 6f 72 6d 5f 52 6f 6c 65 22 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 70 72 65 73 65 74 22 3a 22 73 75 62 73 63 72 69 62 65 72 73 30 33 22 2c 22 6c 61 62 65 6c 73 22 3a 5b 22 63 6f 6e 74 61 63 74 73 2d 63 6f 6e 74 61 63 74 65 Data Ascii: fig":{"collectionFieldKey":""}}],"message_Role":[{"compId":"comp-jto01j0f","role":"message_Role","config":{"collectionFieldKey":""}}],"form_Role":[{"compId":"comp-jto01iqk","role":"form_Role","config":{"preset":"subscribers03","labels":["contacts-contacte
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 22 75 70 6c 6f 61 64 46 6f 6e 74 46 61 63 65 73 22 3a 22 22 7d 7d 2c 22 61 6c 6c 53 74 79 6c 65 73 22 3a 5b 7b 22 63 6f 6c 6f 72 73 22 3a 7b 7d 2c 22 6e 75 6d 62 65 72 73 22 3a 7b 22 70 72 6f 66 69 6c 65 4c 61 79 6f 75 74 22 3a 31 7d 2c 22 62 6f 6f 6c 65 61 6e 73 22 3a 7b 7d 2c 22 66 6f 6e 74 73 22 3a 7b 7d 2c 22 67 6f 6f 67 6c 65 46 6f 6e 74 73 43 73 73 55 72 6c 22 3a 22 22 2c 22 75 70 6c 6f 61 64 46 6f 6e 74 46 61 63 65 73 22 3a 22 22 7d 5d 2c 22 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 7b 22 77 69 64 74 68 22 3a 39 38 30 2c 22 68 65 69 67 68 74 22 3a 32 35 30 7d 2c 22 69 73 49 6e 46 69 72 73 74 46 6f 6c 64 22 3a 74 72 75 65 2c 22 75 73 65 73 43 73 73 50 65 72 42 72 65 61 6b 70 6f 69 6e 74 22 3a 66 61 6c 73 65 7d 7d 7d 2c 22 6f 72 64 65 72 65 64 43 6f 6e 74 Data Ascii: "uploadFontFaces":""}},"allStyles":[{"colors":{},"numbers":{"profileLayout":1},"booleans":{},"fonts":{},"googleFontsCssUrl":"","uploadFontFaces":""}],"dimensions":{"width":980,"height":250},"isInFirstFold":true,"usesCssPerBreakpoint":false}}},"orderedCont
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 20 41 63 63 6f 75 6e 74 22 7d 2c 22 6d 79 2d 77 61 6c 6c 65 74 22 3a 7b 22 69 64 22 3a 22 6f 35 73 75 6b 22 2c 22 74 69 74 6c 65 22 3a 22 4d 79 20 57 61 6c 6c 65 74 22 7d 2c 22 65 76 65 6e 74 73 2d 31 22 3a 7b 22 69 64 22 3a 22 65 6e 38 79 32 22 2c 22 74 69 74 6c 65 22 3a 22 45 76 65 6e 74 73 22 7d 2c 22 70 72 6f 66 69 6c 65 2d 31 22 3a 7b 22 69 64 22 3a 22 6b 7a 32 35 33 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 66 69 6c 65 22 7d 2c 22 65 76 65 6e 74 73 22 3a 7b 22 69 64 22 3a 22 71 37 7a 76 74 22 2c 22 74 69 74 6c 65 22 3a 22 45 76 65 6e 74 20 44 65 74 61 69 6c 73 20 26 20 52 65 67 69 73 74 72 61 74 69 6f 6e 22 7d 2c 22 66 75 6c 6c 73 63 72 65 65 6e 2d 70 61 67 65 22 3a 7b 22 69 64 22 3a 22 68 30 64 73 74 22 2c 22 74 69 74 6c 65 22 3a 22 46 75 6c 6c 73 Data Ascii: Account"},"my-wallet":{"id":"o5suk","title":"My Wallet"},"events-1":{"id":"en8y2","title":"Events"},"profile-1":{"id":"kz253","title":"Profile"},"events":{"id":"q7zvt","title":"Event Details & Registration"},"fullscreen-page":{"id":"h0dst","title":"Fulls
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 2d 77 61 6c 6c 65 74 22 2c 22 76 69 73 69 62 6c 65 4f 6e 44 65 73 6b 74 6f 70 22 3a 74 72 75 65 2c 22 76 69 73 69 62 6c 65 4f 6e 4d 6f 62 69 6c 65 22 3a 74 72 75 65 2c 22 6c 69 6e 6b 4d 65 74 61 44 61 74 61 22 3a 7b 22 74 61 72 67 65 74 22 3a 22 5f 73 65 6c 66 22 2c 22 74 79 70 65 22 3a 22 44 79 6e 61 6d 69 63 50 61 67 65 4c 69 6e 6b 22 7d 7d 2c 7b 22 6c 61 62 65 6c 22 3a 22 4d 79 20 41 63 63 6f 75 6e 74 22 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 75 69 71 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 6d 79 2d 61 63 63 6f 75 6e 74 22 2c 22 76 69 73 69 62 6c 65 4f 6e 44 65 73 6b 74 6f 70 22 3a 74 72 75 65 2c 22 76 69 73 69 62 6c 65 4f 6e 4d 6f 62 69 6c 65 22 3a 74 72 75 65 2c 22 6c 69 6e 6b 4d 65 74 61 44 61 74 61 22 3a 7b 22 74 61 Data Ascii: -wallet","visibleOnDesktop":true,"visibleOnMobile":true,"linkMetaData":{"target":"_self","type":"DynamicPageLink"}},{"label":"My Account","link":"https://www.atuiqe.com/account/my-account","visibleOnDesktop":true,"visibleOnMobile":true,"linkMetaData":{"ta
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 33 34 2c 20 31 39 2c 20 35 31 2c 20 30 29 22 2c 22 62 6f 72 64 65 72 43 6f 6c 6f 72 22 3a 22 72 67 62 28 32 32 37 2c 20 32 32 37 2c 20 32 32 37 29 22 2c 22 62 6f 72 64 65 72 57 69 64 74 68 22 3a 22 30 70 78 22 2c 22 62 6f 72 64 65 72 52 61 64 69 75 73 22 3a 22 30 70 78 22 7d 7d 7d 2c 22 73 74 61 74 69 63 45 76 65 6e 74 73 22 3a 5b 5d 2c 22 63 6f 6d 70 49 64 43 6f 6e 6e 65 63 74 69 6f 6e 73 22 3a 7b 22 43 4f 4e 54 52 4f 4c 4c 45 52 5f 43 4f 4d 50 5f 43 55 53 54 4f 4d 5f 49 44 22 3a 7b 22 77 69 78 43 6f 64 65 22 3a 7b 22 74 79 70 65 22 3a 22 57 69 78 43 6f 64 65 43 6f 6e 6e 65 63 74 69 6f 6e 49 74 65 6d 22 2c 22 72 6f 6c 65 22 3a 22 6d 65 6d 62 65 72 73 31 22 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6d 70 49 64 22 3a 22 77 69 78 43 6f 64 65 22 7d 7d 2c 22 Data Ascii: 34, 19, 51, 0)","borderColor":"rgb(227, 227, 227)","borderWidth":"0px","borderRadius":"0px"}}},"staticEvents":[],"compIdConnections":{"CONTROLLER_COMP_CUSTOM_ID":{"wixCode":{"type":"WixCodeConnectionItem","role":"members1","controllerCompId":"wixCode"}},"
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 6f 6c 6c 65 72 43 6f 6d 70 49 64 22 3a 22 43 4f 4e 54 52 4f 4c 4c 45 52 5f 43 4f 4d 50 5f 43 55 53 54 4f 4d 5f 49 44 22 7d 7d 2c 22 63 6f 6d 70 2d 6d 31 76 35 6d 7a 35 74 22 3a 7b 22 77 69 78 43 6f 64 65 22 3a 7b 22 74 79 70 65 22 3a 22 57 69 78 43 6f 64 65 43 6f 6e 6e 65 63 74 69 6f 6e 49 74 65 6d 22 2c 22 72 6f 6c 65 22 3a 22 69 6d 61 67 65 33 36 22 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6d 70 49 64 22 3a 22 77 69 78 43 6f 64 65 22 7d 7d 2c 22 63 6f 6d 70 2d 6a 74 6f 30 39 6f 69 72 22 3a 7b 22 77 69 78 43 6f 64 65 22 3a 7b 22 74 79 70 65 22 3a 22 57 69 78 43 6f 64 65 43 6f 6e 6e 65 63 74 69 6f 6e 49 74 65 6d 22 2c 22 72 6f 6c 65 22 3a 22 74 65 78 74 31 38 32 22 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6d 70 49 64 22 3a 22 77 69 78 43 6f 64 65 22 7d Data Ascii: ollerCompId":"CONTROLLER_COMP_CUSTOM_ID"}},"comp-m1v5mz5t":{"wixCode":{"type":"WixCodeConnectionItem","role":"image36","controllerCompId":"wixCode"}},"comp-jto09oir":{"wixCode":{"type":"WixCodeConnectionItem","role":"text182","controllerCompId":"wixCode"}
2024-11-08 16:42:59 UTC	1378	IN	Data Raw: 7b 22 77 69 78 43 6f 64 65 22 3a 7b 22 74 79 70 65 22 3a 22 57 69 78 43 6f 64 65 43 6f 6e 6e 65 63 74 69 6f 6e 49 74 65 6d 22 2c 22 72 6f 6c 65 22 3a 22 68 65 61 64 65 72 31 22 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6d 70 49 64 22 3a 22 77 69 78 43 6f 64 65 22 7d 7d 2c 22 50 41 47 45 53 5f 43 4f 4e 54 41 49 4e 45 52 22 3a 7b 22 77 69 78 43 6f 64 65 22 3a 7b 22 74 79 70 65 22 3a 22 57 69 78 43 6f 64 65 43 6f 6e 6e 65 63 74 69 6f 6e 49 74 65 6d 22 2c 22 72 6f 6c 65 22 3a 22 70 61 67 65 73 43 6f 6e 74 61 69 6e 65 72 31 22 2c 22 63 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6d 70 49 64 22 3a 22 77 69 78 43 6f 64 65 22 7d 7d 2c 22 53 4f 53 50 5f 43 4f 4e 54 41 49 4e 45 52 5f 43 55 53 54 4f 4d 5f 49 44 22 3a 7b 22 77 69 78 43 6f 64 65 22 3a 7b 22 74 79 70 65 22 3a 22 Data Ascii: {"wixCode":{"type":"WixCodeConnectionItem","role":"header1","controllerCompId":"wixCode"}},"PAGES_CONTAINER":{"wixCode":{"type":"WixCodeConnectionItem","role":"pagesContainer1","controllerCompId":"wixCode"}},"SOSP_CONTAINER_CUSTOM_ID":{"wixCode":{"type":"

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	1143	OUT	POST /bolt-performance?src=72&evid=21&appName=thunderbolt&is_rollout=0&is_company_network=false&is_sav_rollout=0&is_dac_rollout=0&dc=42&microPop=fastly_42_g&is_cached=false&msid=be3cee66-68c7-4d21-be77-bbeaecbd3fc9&session_id=94daf07d-f9d6-400d-952d-300f4d681c7b&ish=false&isb=false&vsi=b3e163aa-5efc-4056-a3e1-231aa999d9c3&caching=miss,miss_miss&pv=visible&pn=1&v=1.14722.0&url=https%3A%2F%2Fwww.atuiqe.com%2F%3Futm_campaign%3D0f81509a-62f1-47e2-a888-d5be8e836699%26utm_source%3Dso%26utm_medium%3Dmail%26cid%3Da6d855b2-881c-48d2-bb00-0c3ada297a56&st=2&ts=542&tsn=4572&platformOnSite=true HTTP/1.1 Host: frog.wix.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.atuiqe.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.atuiqe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:42:59 UTC	379	IN	HTTP/1.1 204 No Content Date: Fri, 08 Nov 2024 16:42:59 GMT Connection: close Server: nginx Access-Control-Allow-Origin: https://www.atuiqe.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST Access-Control-Allow-Headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-08 16:42:59 UTC	512	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=122 Date: Fri, 08 Nov 2024 16:42:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-08 16:42:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	717	OUT	GET /media/18d56f_41ca7e1b2ab14c59be07f4e85ab686ec~mv2.png/v1/fill/w_184,h_55,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/Email%20Signature%20Logo.png HTTP/1.1 Host: static.wixstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.atuiqe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:43:00 UTC	644	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 6052 Connection: close Server: openresty/1.25.3.2 Date: Fri, 08 Nov 2024 16:42:59 GMT Access-Control-Allow-Origin: * Cache-Control: public, max-age=15552000, immutable X-Seen-By: image-manipulator-54cb87fcfd-jzqrw X-Wixmp-Trace: projects/wix-media-infrastructure/traces/2oZjq5Nkv650RXNUB93apNJFXY8 Timing-Allow-Origin: * Via: 1.1 google, 1.1 3e0d912790c2cd730e222487cbb10f98.cloudfront.net (CloudFront) Vary: Accept X-Cache: Miss from cloudfront X-Amz-Cf-Pop: VIE50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: ofexpq2P5v2Gp0-VohqD_nykdG_76ugh2UnsYhD68FVGLyLxjHb7Uw==
2024-11-08 16:43:00 UTC	6052	IN	Data Raw: 52 49 46 46 9c 17 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 b7 00 00 36 00 00 56 50 38 4c bb 16 00 00 2f b7 80 0d 10 35 e1 7e ff 6f bd 1c 37 ff 54 ff 80 5c 15 47 de 67 2d 17 2e 99 f7 cf ea 5f c3 cc b4 72 9f 79 7c b4 1a ad ca dc ae f6 9c e7 f7 3b c7 a1 eb 77 99 bc 45 cb 0a a3 37 9a 8b e9 51 b9 81 53 1e 8d 02 0e bb 3c 95 c2 e8 72 98 19 a7 ec 94 bc 74 31 e5 a3 72 bb 1d 29 9c 72 97 2e c2 79 ca 61 86 29 73 eb 48 3b 2b a7 18 ce b9 08 cc 55 15 18 ad e6 c2 fa 69 ca b4 fa 86 ac cd 54 0a ba 14 4e b9 4b d2 84 33 e5 30 27 eb 4a 53 7e 56 9a 53 b4 46 23 2b 9c 71 71 2e 9e 32 b9 1c b0 d5 70 9c a2 ab a5 ec 48 92 6c 2b 2a c5 f5 0a 1d 66 3e 9c d5 3c c3 51 5d 7f 25 66 58 f1 5d d0 dd 4b d4 a2 d8 48 92 23 49 5a fd 85 3b 11 9e 0c 1a 35 be 85 c6 20 cb db 9f 13 50 60 Data Ascii: RIFFWEBPVP8X6VP8L/5~o7T\Gg-._ry\|;wE7QS<rt1r)r.ya)sH;+UiTNK30'JS~VSF#+qq.2pHl+*f><Q]%fX]KH#IZ;5 P`

Timestamp	Bytes transferred	Direction	Data
2024-11-08 16:42:59 UTC	736	OUT	GET /media/18d56f_42f583f631e749549c91660499379993~mv2.png/v1/fill/w_159,h_40,al_c,q_85,usm_0.66_1.00_0.01,enc_auto/18d56f_42f583f631e749549c91660499379993~mv2.png HTTP/1.1 Host: static.wixstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.atuiqe.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-08 16:43:00 UTC	644	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 2604 Connection: close Server: openresty/1.25.3.2 Date: Fri, 08 Nov 2024 16:42:59 GMT Access-Control-Allow-Origin: * Cache-Control: public, max-age=15552000, immutable X-Seen-By: image-manipulator-54cb87fcfd-6cj9q X-Wixmp-Trace: projects/wix-media-infrastructure/traces/2oZjq699OzjpZWv8AHIZWceipOA Timing-Allow-Origin: * Via: 1.1 google, 1.1 ac02b9a9a93754a9f85004c4c9792fee.cloudfront.net (CloudFront) Vary: Accept X-Cache: Miss from cloudfront X-Amz-Cf-Pop: VIE50-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: Wy-VxZKluksez5t_TwAfEEIxkeBff3lLvVjh9G2UGzzMoKiGQfO5SQ==
2024-11-08 16:43:00 UTC	2604	IN	Data Raw: 52 49 46 46 24 0a 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 9e 00 00 27 00 00 56 50 38 4c 43 09 00 00 2f 9e c0 09 10 4d 28 68 db c8 51 db fb cd 1f f1 ad 87 10 d1 7f 21 41 22 c9 2b 70 b3 83 48 8e 93 41 cc f0 10 ef 41 84 c5 0a de 0f 2c 90 b4 91 a4 c2 83 e7 5f e5 c1 77 30 2f c1 20 db 48 05 b8 fb 7f 7f ca 47 50 1a 49 8a d4 12 8b 43 12 00 f9 87 73 9f ba 30 fa 2f 24 48 b0 39 05 e0 e3 40 36 1e 87 43 91 89 c5 e1 e0 05 3a 0e b1 ef 83 1b d7 75 00 49 ce f6 2f 92 f2 cc 2f 15 dc dd 61 cd 9a 03 70 06 ce f1 cf 1c 00 e9 cc 21 38 00 6b 8e 40 58 da b8 e2 ee b0 1a a7 33 52 f9 23 55 5d 34 d2 bd 62 21 b7 d9 b6 65 5b 8e e7 ce 93 df ad 34 dc 47 70 a9 dc a9 58 81 1d 08 33 38 bc a1 62 00 77 06 20 54 ce 04 ae d5 ef fa e6 7e a5 d8 b6 b6 ec cd fe 9e f5 e6 0d f3 a7 42 03 Data Ascii: RIFF$WEBPVP8X'VP8LC/M(hQ!A"+pHAA,_w0/ HGPICs0/$H9@6C:uI//ap!8k@X3R#U]4b!e[4GpX38bw T~B