Edit tour

Windows Analysis Report
phish_alert_sp2_2.0.0.0 (3).eml

Overview

General Information

Sample name:	phish_alert_sp2_2.0.0.0 (3).eml
Analysis ID:	1563924
MD5:	4be7e7ad50d9b4ea39719eac6f1fcb04
SHA1:	e262331499620cdad7992bc28143cf14cf499fb6
SHA256:	65fd94e87f7eaf04e0684cbecff5757b0ed9d49116e2eb9aeb7e03f0d8bddb1c
Infos:

Detection

Score:	5
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected TCP or UDP traffic on non-standard ports

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Sigma detected: Suspicious Office Outbound Connections

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 6720 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /eml "C:\Users\user\Desktop\phish_alert_sp2_2.0.0.0 (3).eml" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 3728 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "0474F51F-6FE2-4D5E-9222-2203C9E83E82" "1F744285-7854-45BF-82B6-E0C23F03D646" "6720" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 5528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://urldefense.com/v3/__https:/c33fq04.na1.hubspotlinks.com/Ctc/P*113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FRq3qn9gW95jsWP6lZ3nDN1Xd-ylc_9rdW4dxMFV4CHcG-W45L6DC3S8zjyW3crB7D6__tTbVwH_G22KMCr4N3x0Dybhj7VZV20Rtm8c22LYW3WcHKy7F263NW37v9lR1qC9rFW5sTkW35FKxq3W7J8LvK1d100tW8Bxn1-3ggfvDW1WMCWd6Q2mTRW1T37hT6n35L1W9kfTSY8HR2YsN2lV692smfFTW27ZnKj63smzCW2jd9k07HdCMDV4S0b76qqRrXW5_BLKg7PRLNhW5R383F7MPG1BW5ztv8j4f5KM8W1WtJZ54x66dqW1SttCC5JNHWnVD1Gkc6psQSWW5QGlsD2bmP5HVQ89sX3mzmv6N6z1Bs2TZ8mmW4gDVhf4HXkb6W8MLFyk6SjDnQd8kRNl04__;Kw!!I_DbfM1H!CZeOe6IwoB7PCMn4I7P2l1Z93lopI93R01FxZr3t2sxIsUF81h3xrq4rBJ2Y32aoflvFYt_X0swKQ0qAPEw_G6T1Xy9oARsIT8c8$ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1972,i,6643067825990627353,10844379588285576078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3200 --field-trial-handle=1972,i,6643067825990627353,10844379588285576078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5688 --field-trial-handle=1972,i,6643067825990627353,10844379588285576078,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://urldefense.com/v3/__https:/c33fq04.na1.hubspotlinks.com/Ctc/P*113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FRq3qn9gW95jsWP6lZ3nDN1Xd-ylc_9rdW4dxMFV4CHcG-W45L6DC3S8zjyW3crB7D6__tTbVwH_G22KMCr4N3x0Dybhj7VZV20Rtm8c22LYW3WcHKy7F263NW37v9lR1qC9rFW5sTkW35FKxq3W7J8LvK1d100tW8Bxn1-3ggfvDW1WMCWd6Q2mTRW1T37hT6n35L1W9kfTSY8HR2YsN2lV692smfFTW27ZnKj63smzCW2jd9k07HdCMDV4S0b76qqRrXW5_BLKg7PRLNhW5R383F7MPG1BW5ztv8j4f5KM8W1WtJZ54x66dqW1SttCC5JNHWnVD1Gkc6psQSWW5QGlsD2bmP5HVQ89sX3mzmv6N6z1Bs2TZ8mmW4gDVhf4HXkb6W8MLFyk6SjDnQd8kRNl04__;Kw!!I_DbfM1H!CZeOe6IwoB7PCMn4I7P2l1Z93lopI93R01FxZr3t2sxIsUF81h3xrq4rBJ2Y32aoflvFYt_X0swKQ0qAPEw_G6T1Xy9oARsIT8c8$ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1632,i,16139236141476606363,8322172734252979684,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5008 --field-trial-handle=1632,i,16139236141476606363,8322172734252979684,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5136 --field-trial-handle=1632,i,16139236141476606363,8322172734252979684,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 6720, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.16, DestinationIsIpv6: false, DestinationPort: 49902, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, Initiated: true, ProcessId: 6720, Protocol: tcp, SourceIp: 104.18.11.201, SourceIsIpv6: false, SourcePort: 443

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-11-27T15:50:57.674562+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49751	151.101.194.133	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Number of links: 0
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Number of links: 0

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Title: Sign In - Google Accounts does not match URL
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Title: Sign In - Google Accounts does not match URL

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719054907&r_id=AAYn5hdCv9WwNzmkzmo7rQ%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=ca0d33aa90cce1a62c4fac33dead166354cbb73a24d51135695c0fe1f0da4413
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_57713_533836&as=AdEXTjROFUaXZH1jLyq0Bg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=outline&type=undefined&width=0&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_57722_761531&as=AdEXTjROFUaXZH1jLyq0Bg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719054907&r_id=AAYn5hdCv9WwNzmkzmo7rQ%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=ca0d33aa90cce1a62c4fac33dead166354cbb73a24d51135695c0fe1f0da4413
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_57713_533836&as=AdEXTjROFUaXZH1jLyq0Bg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=outline&type=undefined&width=0&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_57722_761531&as=AdEXTjROFUaXZH1jLyq0Bg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719054907&r_id=AAYn5hdCv9WwNzmkzmo7rQ%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=ca0d33aa90cce1a62c4fac33dead166354cbb73a24d51135695c0fe1f0da4413
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_57713_533836&as=AdEXTjROFUaXZH1jLyq0Bg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=outline&type=undefined&width=0&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_57722_761531&as=AdEXTjROFUaXZH1jLyq0Bg&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719054907&r_id=AAYn5hdCv9WwNzmkzmo7rQ%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=ca0d33aa90cce1a62c4fac33dead166354cbb73a24d51135695c0fe1f0da4413
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719064867&r_id=AAYn5hdCv9WwNzmkzmo7rQ==&pt=undefined&app_id=PXdOjV695v&uc=scraping&d_id=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_128098_297617&as=rqf99k0oy0HwVVEge8KiFA&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=outline&type=undefined&width=0&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_128107_916334&as=rqf99k0oy0HwVVEge8KiFA&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719127695&r_id=AAYn5hwLFSZ7wxunYRPDrQ%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=ca0d33aa90cce1a62c4fac33dead166354cbb73a24d51135695c0fe1f0da4413
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719128080&r_id=AAYn5hwLFSZ7wxunYRPDrQ==&pt=undefined&app_id=PXdOjV695v&uc=scraping&d_id=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=undefined&type=undefined&width=325px&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_128098_297617&as=rqf99k0oy0HwVVEge8KiFA&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://accounts.google.com/gsi/button?logo_alignment=center&shape=pill&size=large&text=continue_with&theme=outline&type=undefined&width=0&client_id=990339570472-k6nqn1tpmitg8pui82bfaun3jrpmiuhs.apps.googleusercontent.com&iframe_id=gsi_128107_916334&as=rqf99k0oy0HwVVEge8KiFA&hl=en_US
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719127695&r_id=AAYn5hwLFSZ7wxunYRPDrQ%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=ca0d33aa90cce1a62c4fac33dead166354cbb73a24d51135695c0fe1f0da4413
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: Iframe src: https://li.protechts.net/index.html?ts=1732719128080&r_id=AAYn5hwLFSZ7wxunYRPDrQ==&pt=undefined&app_id=PXdOjV695v&uc=scraping&d_id=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: <input type="password" .../> found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: <input type="password" .../> found

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No favicon

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="author".. found

Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQEsqGVr09DtxwAAAZNuGmWgsHDQFnJoWSQUvKk7LZqtaPJKiGhNtWagZaXcQANmjXBl03UOFh_P-OJ8QZJ_1HVCtfQ0nqi59XfgV9CKceejWmUtW_aq5XVdstF7D3iyZQkHagI=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz--WBPyaT3HmRd6z332y0yh1yPl9VCqtriLbBaqpELOtDvYksQWU46U8qUFx0-2EbMU_B1sG2ovjt0FRwo6GrUP1KmBygg%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found
Source: https://www.linkedin.com/authwall?trk=bf&trkInfo=AQF5ejPGo1NzGgAAAZNuG54gr-fS6lroI4-LMHYlOt8qu5jRDrE4Rwa99RhQmCtLriAJYX-6mxuXUclIWAEwka2dtkvar7c_leJfnZN1Wd21KRtBffdHvVV2aJwSYElJklEQJtU=&original_referer=&sessionRedirect=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftothenew%2Fposts%2F%3FfeedView%3Dall%26utm_campaign%3D3335195-TTN_Thanksgiving_US_FY24-25%26utm_medium%3Demail%26_hsenc%3Dp2ANqtz-8eTclO4VFeafpIKbEJ05lF_gSz_yI8xllDLEtHacai2QspDmlgqHXbb82KxBb9S18o1EuhqSi0I11DQzmBQWlfoqwGuw%26_hsmi%3D335919379%26utm_content%3D335919379%26utm_source%3Dhs_email	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.30.24.109:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.24.109:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.155.206:443 -> 192.168.2.16:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.201:443 -> 192.168.2.16:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.244.108:443 -> 192.168.2.16:49904 version: TLS 1.2

Source: global traffic

UDP traffic: 192.168.2.16:56247 -> 74.125.250.129:19302

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: urldefense.com to https://c33fq04.na1.hubspotlinks.com/ctc/p+113/c33fq04/vwhzqs6gkq8qn3nxyb3b5dylw63xjzn5nvyvwn5j5frq3qn9gw95jswp6lz3ndn1xd-ylc_9rdw4dxmfv4chcg-w45l6dc3s8zjyw3crb7d6__ttbvwh_g22kmcr4n3x0dybhj7vzv20rtm8c22lyw3wchky7f263nw37v9lr1qc9rfw5stkw35fkxq3w7j8lvk1d100tw8bxn1-3ggfvdw1wmcwd6q2mtrw1t37ht6n35l1w9kftsy8hr2ysn2lv692smfftw27znkj63smzcw2jd9k07hdcmdv4s0b76qqrrxw5_blkg7prlnhw5r383f7mpg1bw5ztv8j4f5km8w1wtjz54x66dqw1sttcc5jnhwnvd1gkc6psqsww5qglsd2bmp5hvq89sx3mzmv6n6z1bs2tz8mmw4gdvhf4hxkb6w8mlfyk6sjdnqd8krnl04
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: urldefense.com to https://c33fq04.na1.hubspotlinks.com/ctc/p+113/c33fq04/vwhzqs6gkq8qn3nxyb3b5dylw63xjzn5nvyvwn5j5frq3qn9gw95jswp6lz3ndn1xd-ylc_9rdw4dxmfv4chcg-w45l6dc3s8zjyw3crb7d6__ttbvwh_g22kmcr4n3x0dybhj7vzv20rtm8c22lyw3wchky7f263nw37v9lr1qc9rfw5stkw35fkxq3w7j8lvk1d100tw8bxn1-3ggfvdw1wmcwd6q2mtrw1t37ht6n35l1w9kftsy8hr2ysn2lv692smfftw27znkj63smzcw2jd9k07hdcmdv4s0b76qqrrxw5_blkg7prlnhw5r383f7mpg1bw5ztv8j4f5km8w1wtjz54x66dqw1sttcc5jnhwnvd1gkc6psqsww5qglsd2bmp5hvq89sx3mzmv6n6z1bs2tz8mmw4gdvhf4hxkb6w8mlfyk6sjdnqd8krnl04

Source: Joe Sandbox View	IP Address: 13.107.246.63 13.107.246.63
Source: Joe Sandbox View	IP Address: 52.71.28.102 52.71.28.102
Source: Joe Sandbox View	IP Address: 104.18.10.201 104.18.10.201
Source: Joe Sandbox View	IP Address: 52.6.56.188 52.6.56.188

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3

Source: Network traffic

Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49751 -> 151.101.194.133:443

Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.24.109
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.181.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.181.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.181.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.181.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.181.23
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.181.23

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zoGaLNYvrZPUsuw&MD=zPa3OwRo HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v3/__https:/c33fq04.na1.hubspotlinks.com/Ctc/P113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FRq3qn9gW95jsWP6lZ3nDN1Xd-ylc_9rdW4dxMFV4CHcG-W45L6DC3S8zjyW3crB7D6__tTbVwH_G22KMCr4N3x0Dybhj7VZV20Rtm8c22LYW3WcHKy7F263NW37v9lR1qC9rFW5sTkW35FKxq3W7J8LvK1d100tW8Bxn1-3ggfvDW1WMCWd6Q2mTRW1T37hT6n35L1W9kfTSY8HR2YsN2lV692smfFTW27ZnKj63smzCW2jd9k07HdCMDV4S0b76qqRrXW5_BLKg7PRLNhW5R383F7MPG1BW5ztv8j4f5KM8W1WtJZ54x66dqW1SttCC5JNHWnVD1Gkc6psQSWW5QGlsD2bmP5HVQ89sX3mzmv6N6z1Bs2TZ8mmW4gDVhf4HXkb6W8MLFyk6SjDnQd8kRNl04__;Kw!!I_DbfM1H!CZeOe6IwoB7PCMn4I7P2l1Z93lopI93R01FxZr3t2sxIsUF81h3xrq4rBJ2Y32aoflvFYt_X0swKQ0qAPEw_G6T1Xy9oARsIT8c8$ HTTP/1.1Host: urldefense.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ctc/P+113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FRq3qn9gW95jsWP6lZ3nDN1Xd-ylc_9rdW4dxMFV4CHcG-W45L6DC3S8zjyW3crB7D6__tTbVwH_G22KMCr4N3x0Dybhj7VZV20Rtm8c22LYW3WcHKy7F263NW37v9lR1qC9rFW5sTkW35FKxq3W7J8LvK1d100tW8Bxn1-3ggfvDW1WMCWd6Q2mTRW1T37hT6n35L1W9kfTSY8HR2YsN2lV692smfFTW27ZnKj63smzCW2jd9k07HdCMDV4S0b76qqRrXW5_BLKg7PRLNhW5R383F7MPG1BW5ztv8j4f5KM8W1WtJZ54x66dqW1SttCC5JNHWnVD1Gkc6psQSWW5QGlsD2bmP5HVQ89sX3mzmv6N6z1Bs2TZ8mmW4gDVhf4HXkb6W8MLFyk6SjDnQd8kRNl04 HTTP/1.1Host: c33fq04.na1.hubspotlinks.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/public/v1/encoded/track/tc/P+113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FRq3qn9gW95jsWP6lZ3nDN1Xd-ylc_9rdW4dxMFV4CHcG-W45L6DC3S8zjyW3crB7D6__tTbVwH_G22KMCr4N3x0Dybhj7VZV20Rtm8c22LYW3WcHKy7F263NW37v9lR1qC9rFW5sTkW35FKxq3W7J8LvK1d100tW8Bxn1-3ggfvDW1WMCWd6Q2mTRW1T37hT6n35L1W9kfTSY8HR2YsN2lV692smfFTW27ZnKj63smzCW2jd9k07HdCMDV4S0b76qqRrXW5_BLKg7PRLNhW5R383F7MPG1BW5ztv8j4f5KM8W1WtJZ54x66dqW1SttCC5JNHWnVD1Gkc6psQSWW5QGlsD2bmP5HVQ89sX3mzmv6N6z1Bs2TZ8mmW4gDVhf4HXkb6W8MLFyk6SjDnQd8kRNl04?_ud=3c619ac1-e02b-4bd8-a1f1-1ef641b6089e&_jss=1&_fl=8&_pl=5&_hc=4&_lg=en-US,en&_plt=Win32&_scr=1280,1024 HTTP/1.1Host: c33fq04.na1.hubspotlinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html?ts=1732719054907&r_id=AAYn5hdCv9WwNzmkzmo7rQ%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=ca0d33aa90cce1a62c4fac33dead166354cbb73a24d51135695c0fe1f0da4413 HTTP/1.1Host: li.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=zoGaLNYvrZPUsuw&MD=zPa3OwRo HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ns?c=042dc190-accf-11ef-8cd9-9544dc733d5e HTTP/1.1Host: stk.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://li.protechts.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=042dc190-accf-11ef-8cd9-9544dc733d5e HTTP/1.1Host: stk.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /litms/utag/seo-directory-frontend/utag.js?cb=1732719000000 HTTP/1.1Host: platform.linkedin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lang=v=2&lang=en-us; bcookie="v=2&1edb48a5-0696-4c73-8567-45679ec52bee"; lidc="b=OGST03:s=O:r=O:a=O:p=O:g=3408:u=1:x=1:i=1732719046:t=1732805446:v=2:sig=AQFqoB06otBLAYYjO01aE2BxSkjMdZLX"; rtc=AQH-5DGzIsARBQAAAZNuGqvwScRogiPQf5lISQU2FuAR4DrHSWkug9JJKYBXKzjrDl95aPqIyURG-LkQF-lsItAo1-_npsdiZ03VbIqvZuByWJq3pv1lfSlPMOWGlNMJyH5NYtFdmprTAcYlwnk2aLIojMRRT9CKUUoVIIhQghczbsaR3oQK1baaberc9GFwluTixi_sqzun5t1S8sNmJRcB8Lbf6czM-uqidwWhIiJDkAV5fLSVq1k=
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html?ts=1732719064867&r_id=AAYn5hdCv9WwNzmkzmo7rQ==&pt=undefined&app_id=PXdOjV695v&uc=scraping&d_id=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1Host: li.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pxcts=059a5e04-accf-11ef-b5da-4674e39946f1; _pxvid=059a5243-accf-11ef-b5d8-9890a42713ea; _px3=18b69effb410c937de994d1bb31313d4496110c6a1acfcfd05aede816c827be5:ckWKqZzV5Sf0dToA52GXuIOD9FgMCsWAa8ztOQcrweWDa2OT4KeWsrKPpfRhpEBEYg+8GPLnKxb4vohde8xIEw==:1000:20ehHe+sV/fmjdwbina71mrzr3vW3uqMgibW96Yh2EaPex5kmcRGhRs4Qpv0ZDzRxIUmePIfXUVlmoC7QWp0BjR/YVn6CqbXYo6saeQPuWP9qld7jbbW0mHJjjpmLNWmz3p9m3L8jOJmPRrfbJUpJc8lq4oZNeann7/T8pgK9xmGkwgg19P0k7s+/I36w9Jxle/PJLLudLwYbGkD5STzl+zM6nrlpfSTFinnCOU9KEw=
Source: global traffic	HTTP traffic detected: GET /litms/utag/seo-directory-frontend/utag.js?cb=1732719000000 HTTP/1.1Host: platform.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lang=v=2&lang=en-us; bcookie="v=2&1edb48a5-0696-4c73-8567-45679ec52bee"; lidc="b=OGST03:s=O:r=O:a=O:p=O:g=3408:u=1:x=1:i=1732719046:t=1732805446:v=2:sig=AQFqoB06otBLAYYjO01aE2BxSkjMdZLX"; rtc=AQH-5DGzIsARBQAAAZNuGqvwScRogiPQf5lISQU2FuAR4DrHSWkug9JJKYBXKzjrDl95aPqIyURG-LkQF-lsItAo1-_npsdiZ03VbIqvZuByWJq3pv1lfSlPMOWGlNMJyH5NYtFdmprTAcYlwnk2aLIojMRRT9CKUUoVIIhQghczbsaR3oQK1baaberc9GFwluTixi_sqzun5t1S8sNmJRcB8Lbf6czM-uqidwWhIiJDkAV5fLSVq1k=
Source: global traffic	HTTP traffic detected: GET /ns?c=08316f80-accf-11ef-8963-91ef342ae4d5 HTTP/1.1Host: stk.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://li.protechts.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=08316f80-accf-11ef-8963-91ef342ae4d5 HTTP/1.1Host: stk.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/724974/analytics.js?dt=7249741698245123882000&pd=avt&di=linkedin.com HTTP/1.1Host: s.xlgmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs01/main.js HTTP/1.1Host: cadmus2.script.acConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/724974/analytics.js?dt=7249741698245123882000&pd=avt&di=linkedin.com HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs01/main.js HTTP/1.1Host: cadmus2.script.acConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiT2cNEGVv5JCc/postback?oz_pl=1&dt=7249741698245123882000&pd=avt&di=linkedin.com&ci=724974&psv=2.149.0&_x=1 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiT2cNEGVv5JCc/postback?oz_pl=1&dt=7249741698245123882000&pd=avt&di=linkedin.com&ci=724974&psv=2.149.0&_x=1 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiT2cNEGVv5JCc/postback?dt=7249741698245123882000&pd=avt&di=linkedin.com&ci=724974&sid=AyGiT2cNEGVv5JCc&oz_sc=1bc2a6e265c50d722083a201&oz_df=1732719074047&oz_l=440&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiT2cNEGVv5JCc/postback?dt=7249741698245123882000&pd=avt&di=linkedin.com&ci=724974&sid=AyGiT2cNEGVv5JCc&oz_sc=1bc2a6e265c50d722083a201&oz_df=1732719075003&oz_l=8150&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIk6HLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiT2cNEGVv5JCc/postback?dt=7249741698245123882000&pd=avt&di=linkedin.com&ci=724974&sid=AyGiT2cNEGVv5JCc&oz_sc=1bc2a6e265c50d722083a201&oz_df=1732719077014&oz_l=584&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiT2cNEGVv5JCc/postback?dt=7249741698245123882000&pd=avt&di=linkedin.com&ci=724974&sid=AyGiT2cNEGVv5JCc&oz_sc=1bc2a6e265c50d722083a201&oz_df=1732719078995&oz_l=72&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?correlationId=669727ba-8768-4f0e-b24b-961aa5f79833&type=data HTTP/1.1Host: ps.azurewaf.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiT2cNEGVv5JCc/postback?dt=7249741698245123882000&pd=avt&di=linkedin.com&ci=724974&sid=AyGiT2cNEGVv5JCc&oz_sc=1bc2a6e265c50d722083a201&oz_df=1732719080994&oz_l=355&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hub/481864/hubfs/TTN_Email%20Marketing%202024-25/Thanks%20Giving-02.png?width=4000&upscale=true&name=Thanks%20Giving-02.png HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Accept-Encoding: gzip, deflateHost: hs-481864.f.hubspotemail.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /Cto/P+113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWW5j5Fzk8fYFlC1y2 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Accept-Encoding: gzip, deflateHost: c33fq04.na1.hubspotlinks.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /events/duration/v1/track/td/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FGG5XVRjW8JtHcM5y7QZbW6GvhkC1Nj1jmW2D0pXg38nz-kW4pCgsd30l6KH21w2 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Accept-Encoding: gzip, deflateConnection: Keep-AliveHost: eventtracking.hubapi.com
Source: global traffic	HTTP traffic detected: GET /events/duration/v1/track/td/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FGG5YjhYW8JtHcM4VQyQlW6GvhkC1Nj1jmW2D0pXg38nz-kW4pCgsd30l6KH21w2 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Accept-Encoding: gzip, deflateConnection: Keep-AliveHost: eventtracking.hubapi.com
Source: global traffic	HTTP traffic detected: GET /events/duration/v1/track/td/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FGG5YKNzW8JtHcM5LmgRsW6GvhkC1Nj1jmW2D0pXg38nz-kW4pCgsd30l6KH21w2 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Accept-Encoding: gzip, deflateConnection: Keep-AliveHost: eventtracking.hubapi.com
Source: global traffic	HTTP traffic detected: GET /events/duration/v1/track/td/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FGG5Z7fbW8JtHcM6KQ9TjW6GvhkC1Nj1jmW2D0pXg38nz-kW4pCgsd30l6KH21w2 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Accept-Encoding: gzip, deflateConnection: Keep-AliveHost: eventtracking.hubapi.com
Source: global traffic	HTTP traffic detected: GET /events/duration/v1/track/td/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FGG5ZyKRW8JtHcM54b96sW6GvhkC1Nj1jmW2D0pXg38nz-kW4pCgsd30l6KH21w2 HTTP/1.1Accept: /User-Agent: Mozilla/4.0 (compatible; ms-office; MSOffice 16)Accept-Encoding: gzip, deflateConnection: Keep-AliveHost: eventtracking.hubapi.com
Source: global traffic	HTTP traffic detected: GET /v3/__https:/c33fq04.na1.hubspotlinks.com/Ctc/P113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FRq3qn9gW95jsWP6lZ3nDN1Xd-ylc_9rdW4dxMFV4CHcG-W45L6DC3S8zjyW3crB7D6__tTbVwH_G22KMCr4N3x0Dybhj7VZV20Rtm8c22LYW3WcHKy7F263NW37v9lR1qC9rFW5sTkW35FKxq3W7J8LvK1d100tW8Bxn1-3ggfvDW1WMCWd6Q2mTRW1T37hT6n35L1W9kfTSY8HR2YsN2lV692smfFTW27ZnKj63smzCW2jd9k07HdCMDV4S0b76qqRrXW5_BLKg7PRLNhW5R383F7MPG1BW5ztv8j4f5KM8W1WtJZ54x66dqW1SttCC5JNHWnVD1Gkc6psQSWW5QGlsD2bmP5HVQ89sX3mzmv6N6z1Bs2TZ8mmW4gDVhf4HXkb6W8MLFyk6SjDnQd8kRNl04__;Kw!!I_DbfM1H!CZeOe6IwoB7PCMn4I7P2l1Z93lopI93R01FxZr3t2sxIsUF81h3xrq4rBJ2Y32aoflvFYt_X0swKQ0qAPEw_G6T1Xy9oARsIT8c8$ HTTP/1.1Host: urldefense.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ctc/P+113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FRq3qn9gW95jsWP6lZ3nDN1Xd-ylc_9rdW4dxMFV4CHcG-W45L6DC3S8zjyW3crB7D6__tTbVwH_G22KMCr4N3x0Dybhj7VZV20Rtm8c22LYW3WcHKy7F263NW37v9lR1qC9rFW5sTkW35FKxq3W7J8LvK1d100tW8Bxn1-3ggfvDW1WMCWd6Q2mTRW1T37hT6n35L1W9kfTSY8HR2YsN2lV692smfFTW27ZnKj63smzCW2jd9k07HdCMDV4S0b76qqRrXW5_BLKg7PRLNhW5R383F7MPG1BW5ztv8j4f5KM8W1WtJZ54x66dqW1SttCC5JNHWnVD1Gkc6psQSWW5QGlsD2bmP5HVQ89sX3mzmv6N6z1Bs2TZ8mmW4gDVhf4HXkb6W8MLFyk6SjDnQd8kRNl04 HTTP/1.1Host: c33fq04.na1.hubspotlinks.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/public/v1/encoded/track/tc/P+113/c33fq04/VWhzqS6gkQ8qN3nXyB3B5DylW63xJzN5nVYvWN5j5FRq3qn9gW95jsWP6lZ3nDN1Xd-ylc_9rdW4dxMFV4CHcG-W45L6DC3S8zjyW3crB7D6__tTbVwH_G22KMCr4N3x0Dybhj7VZV20Rtm8c22LYW3WcHKy7F263NW37v9lR1qC9rFW5sTkW35FKxq3W7J8LvK1d100tW8Bxn1-3ggfvDW1WMCWd6Q2mTRW1T37hT6n35L1W9kfTSY8HR2YsN2lV692smfFTW27ZnKj63smzCW2jd9k07HdCMDV4S0b76qqRrXW5_BLKg7PRLNhW5R383F7MPG1BW5ztv8j4f5KM8W1WtJZ54x66dqW1SttCC5JNHWnVD1Gkc6psQSWW5QGlsD2bmP5HVQ89sX3mzmv6N6z1Bs2TZ8mmW4gDVhf4HXkb6W8MLFyk6SjDnQd8kRNl04?_ud=1959991b-2d00-4eb4-8fad-479a3460112c&_jss=1&_fl=8&_pl=5&_hc=4&_lg=en-US,en&_plt=Win32&_scr=1280,1024 HTTP/1.1Host: c33fq04.na1.hubspotlinks.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html?ts=1732719127695&r_id=AAYn5hwLFSZ7wxunYRPDrQ%3D%3D&app_id=PXdOjV695v&uc=scraping&d_id=ca0d33aa90cce1a62c4fac33dead166354cbb73a24d51135695c0fe1f0da4413 HTTP/1.1Host: li.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pxvid=059a5243-accf-11ef-b5d8-9890a42713ea; _px3=d3824deced540288e0e78d9ab2558246f7c517ca1cf5ff074a7bfb9129c5c5a1:vRrwwyXfjpzCEeOe3O1K7l+PHQ7EA/WahR8AzjdoLuQA6/LRRN7syB+rT4tPclcj0+P2xkuC/cq7z1OpeGTqGw==:1000:d4kTfeAB89mrfXaooYWD2zqW2d2/nuFA+43hroa3P7fdvDGsVD7nfAjnDNRtlyv/Za6I5yF6vSBMcNGWaDj/iJOtJ2cUO26ZAyTKytKCd929GottMA/8JS0D887lGxSxPhLi9ZG0p1OkSRlGSPIHGum1ZnINhtUjWS1qqt/5NCdXBX0oXfWZM3KGwM+K6Lh5sA3WzDiJLfFnndzd82vR8PckPL79Fne9q/yqwmVvaMc=
Source: global traffic	HTTP traffic detected: GET /index.html?ts=1732719128080&r_id=AAYn5hwLFSZ7wxunYRPDrQ==&pt=undefined&app_id=PXdOjV695v&uc=scraping&d_id=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1Host: li.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.linkedin.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pxvid=059a5243-accf-11ef-b5d8-9890a42713ea; _px3=d3824deced540288e0e78d9ab2558246f7c517ca1cf5ff074a7bfb9129c5c5a1:vRrwwyXfjpzCEeOe3O1K7l+PHQ7EA/WahR8AzjdoLuQA6/LRRN7syB+rT4tPclcj0+P2xkuC/cq7z1OpeGTqGw==:1000:d4kTfeAB89mrfXaooYWD2zqW2d2/nuFA+43hroa3P7fdvDGsVD7nfAjnDNRtlyv/Za6I5yF6vSBMcNGWaDj/iJOtJ2cUO26ZAyTKytKCd929GottMA/8JS0D887lGxSxPhLi9ZG0p1OkSRlGSPIHGum1ZnINhtUjWS1qqt/5NCdXBX0oXfWZM3KGwM+K6Lh5sA3WzDiJLfFnndzd82vR8PckPL79Fne9q/yqwmVvaMc=
Source: global traffic	HTTP traffic detected: GET /ns?c=2dd905e0-accf-11ef-a48a-0314e30df87b HTTP/1.1Host: stk.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://li.protechts.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=2de8e460-accf-11ef-937e-23b41430e46b HTTP/1.1Host: stk.protechts.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://li.protechts.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=2dd905e0-accf-11ef-a48a-0314e30df87b HTTP/1.1Host: stk.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=2de8e460-accf-11ef-937e-23b41430e46b HTTP/1.1Host: stk.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/724974/analytics.js?dt=7249741698245123882000&pd=avt&di=linkedin.com HTTP/1.1Host: s.xlgmedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mg/ssiframe.html HTTP/1.1Host: crcldu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/724974/analytics.js?dt=7249741698245123882000&pd=avt&di=linkedin.com HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event?correlationId=b5a5db11-231c-4037-a182-a9be685c71fb&type=data HTTP/1.1Host: ps.azurewaf.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiZ_cNEGR73N0L/postback?oz_pl=1&pd=avt&di=linkedin.com&ci=724974&dt=7249741698245123882000&psv=2.149.0&_x=1 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiZ_cNEGR73N0L/postback?pd=avt&di=linkedin.com&ci=724974&dt=7249741698245123882000&sid=AyGiZ_cNEGR73N0L&oz_sc=eb76d0efd0b4f2f40304943c&oz_df=1732719134308&oz_l=429&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiZ_cNEGR73N0L/postback?pd=avt&di=linkedin.com&ci=724974&dt=7249741698245123882000&sid=AyGiZ_cNEGR73N0L&oz_sc=eb76d0efd0b4f2f40304943c&oz_df=1732719134581&oz_l=8781&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiZ_cNEGR73N0L/postback?pd=avt&di=linkedin.com&ci=724974&dt=7249741698245123882000&sid=AyGiZ_cNEGR73N0L&oz_sc=eb76d0efd0b4f2f40304943c&oz_df=1732719135232&oz_l=15&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiZ_cNEGR73N0L/postback?oz_pl=1&pd=avt&di=linkedin.com&ci=724974&dt=7249741698245123882000&psv=2.149.0&_x=1 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2/2.149.0/724974/AyGiZ_cNEGR73N0L/postback?pd=avt&di=linkedin.com&ci=724974&dt=7249741698245123882000&sid=AyGiZ_cNEGR73N0L&oz_sc=eb76d0efd0b4f2f40304943c&oz_df=1732719139828&oz_l=320&cv=3 HTTP/1.1Host: s.xlgmedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: urldefense.com
Source: global traffic	DNS traffic detected: DNS query: c33fq04.na1.hubspotlinks.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: static.licdn.com
Source: global traffic	DNS traffic detected: DNS query: li.protechts.net
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: client.protechts.net
Source: global traffic	DNS traffic detected: DNS query: stk.protechts.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxdojv695v.protechts.net
Source: global traffic	DNS traffic detected: DNS query: platform.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: s.xlgmedia.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: cadmus2.script.ac
Source: global traffic	DNS traffic detected: DNS query: hs-481864.f.hubspotemail.net
Source: global traffic	DNS traffic detected: DNS query: eventtracking.hubapi.com
Source: global traffic	DNS traffic detected: DNS query: crcldu.com

Source: unknown

HTTP traffic detected: POST /api/v2/msft HTTP/1.1Host: collector-pxdojv695v.protechts.netConnection: keep-aliveContent-Length: 924sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://li.protechts.netSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://li.protechts.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: phish_alert_sp2_2.0.0.0 (3).eml	String found in binary or memory: https://481864.hs-sites.com/-temporary-slug-cc898d74-1c64-4b42-96ad-8a6c22b3da59
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_223.5.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: ~WRS{D1E54ECC-2A73-4B51-80D0-344CA8A61A3F}.tmp.1.dr	String found in binary or memory: https://c33fq04.na1.hubspotlinks.com/Cto/P
Source: chromecache_192.5.dr	String found in binary or memory: https://c33fq04.na1.hubspotlinks.com/events/public/v1/encoded/track/tc/P
Source: chromecache_209.5.dr, chromecache_197.5.dr, chromecache_212.5.dr, chromecache_222.5.dr	String found in binary or memory: https://client.protechts.net/
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#layout
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: ~WRS{D1E54ECC-2A73-4B51-80D0-344CA8A61A3F}.tmp.1.dr	String found in binary or memory: https://hs-481864.f.hubspotemail.net/hub/481864/hubfs/TTN_Email%20Marketing%202024-25/Thanks%20Givin
Source: phish_alert_sp2_2.0.0.0 (3).eml	String found in binary or memory: https://hs-481864.s.hubspotemail.net/subscription-preferences/v2/unsubscribe-all?data=W2nXS-N30h-MjW
Source: chromecache_191.5.dr, chromecache_177.5.dr	String found in binary or memory: https://jarvis.corp.linkedin.com/codesearch/result/?path=flock-templates%2Fflock%2Femail%2Femail_ser
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://meet.google.com
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: phish_alert_sp2_2.0.0.0 (3).eml	String found in binary or memory: https://policy.hubspot.com/abuse-complaints)
Source: chromecache_203.5.dr, chromecache_223.5.dr	String found in binary or memory: https://ssl.gstatic.com/_/gsi/_/ss/k=gsi.gsi.hxt2fGtpX-o.L.W.O/am=chE/d=1/rs=AF0KOtUE-4sZUYGEHSlTf3d
Source: phish_alert_sp2_2.0.0.0 (3).eml, ~WRS{D1E54ECC-2A73-4B51-80D0-344CA8A61A3F}.tmp.1.dr	String found in binary or memory: https://urldefense.com/v3/__https://c33fq04.na1.hubspotlinks.com/Ctc/P
Source: phish_alert_sp2_2.0.0.0 (3).eml, ~WRS{D1E54ECC-2A73-4B51-80D0-344CA8A61A3F}.tmp.1.dr	String found in binary or memory: https://urldefense.com/v3/__https://hs-481864.s.hubspotemail.net/hs/preferences-center/en/direct?dat
Source: ~WRS{D1E54ECC-2A73-4B51-80D0-344CA8A61A3F}.tmp.1.dr	String found in binary or memory: https://urldefense.com/v3/__https://hs-481864.s.hubspotemail.net/hs/preferences-center/en/page?data=
Source: chromecache_191.5.dr, chromecache_177.5.dr	String found in binary or memory: https://www.figma.com/file/egkKv7mudRwk2dVPM0WCR6/NBA-Digest-Email?type=design&node-id=2927-186236&t

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: unknown	HTTPS traffic detected: 184.30.24.109:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.30.24.109:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.155.206:443 -> 192.168.2.16:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.201:443 -> 192.168.2.16:49902 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.244.108:443 -> 192.168.2.16:49904 version: TLS 1.2

Source: classification engine

Classification label: clean5.winEML@46/112@85/23