Edit tour

Windows Analysis Report
https://app.droplet.io/form/yBW3QN

Overview

General Information

Sample URL:	https://app.droplet.io/form/yBW3QN
Analysis ID:	1573079
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1704 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2044,i,6879957663113514776,16363010800356894121,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.droplet.io/form/yBW3QN" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/4505620735721472/envelope/?sentry_key=dfae1a684c5164a4f88df7210c70831c&sentry_version=7&sentry_client=sentry.javascript.react%2F8.40.0 HTTP/1.1Host: o4505602309816320.ingest.sentry.ioConnection: keep-aliveContent-Length: 451sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://app.droplet.ioSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://app.droplet.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:17:39 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:17:40 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:17:42 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:17:47 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:17:52 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:17:58 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:18:05 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:18:07 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:18:09 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 11 Dec 2024 13:18:13 GMTContent-Type: text/htmlContent-Length: 548Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_192.2.dr, chromecache_169.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_174.2.dr, chromecache_183.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_192.2.dr, chromecache_169.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_192.2.dr, chromecache_169.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_238.2.dr, chromecache_120.2.dr	String found in binary or memory: http://ricostacruz.com/nprogress
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: http://stuartk.com/jszip
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_160.2.dr, chromecache_168.2.dr	String found in binary or memory: https://api.droplet.io/v1/assets/drplt-fi-p-0x6Q4W-yBW3QN-ZRDyBYG88NsRN0GVNkQkhv89nZj-316-102.png
Source: chromecache_172.2.dr, chromecache_228.2.dr, chromecache_225.2.dr, chromecache_241.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=68196
Source: chromecache_180.2.dr, chromecache_251.2.dr	String found in binary or memory: https://droplet-help.freshdesk.com
Source: chromecache_192.2.dr, chromecache_169.2.dr	String found in binary or memory: https://fb.me/react-async-component-lifecycle-hooks
Source: chromecache_228.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_132.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_132.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_116.2.dr, chromecache_114.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Bitter&display=swap
Source: chromecache_116.2.dr, chromecache_114.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Fira
Source: chromecache_116.2.dr, chromecache_114.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Mr
Source: chromecache_116.2.dr, chromecache_114.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Noto
Source: chromecache_116.2.dr, chromecache_114.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Open
Source: chromecache_116.2.dr, chromecache_114.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Red
Source: chromecache_114.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: chromecache_184.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v36/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLXOXWh2.woff2)
Source: chromecache_184.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v36/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLbOXWh2.woff2)
Source: chromecache_184.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v36/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLfOXWh2.woff2)
Source: chromecache_184.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v36/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLjOXQ.woff2)
Source: chromecache_184.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/bitter/v36/raxhHiqOu8IVPmnRc6SY1KXhnF_Y8fbfOLzOXWh2.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9eCBsR6Z2vfE9aq3bL0fxyUs4tcw4W_A9sJV37Nv7g.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9eCBsR6Z2vfE9aq3bL0fxyUs4tcw4W_A9sJV77Nv7g.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9eCBsR6Z2vfE9aq3bL0fxyUs4tcw4W_A9sJVD7Ng.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9eCBsR6Z2vfE9aq3bL0fxyUs4tcw4W_A9sJVP7Nv7g.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9eCBsR6Z2vfE9aq3bL0fxyUs4tcw4W_A9sJVT7Nv7g.woff2)
Source: chromecache_127.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firacode/v22/uU9eCBsR6Z2vfE9aq3bL0fxyUs4tcw4W_A9sJVz7Nv7g.woff2)
Source: chromecache_176.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mrdafoe/v14/lJwE-pIzkS5NXuMMrFijibIyxw.woff2)
Source: chromecache_176.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/mrdafoe/v14/lJwE-pIzkS5NXuMMrFitibI.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoserif/v23/ga6iaw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTa32J4wsL2JAlAhZqFCTw8
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoserif/v23/ga6iaw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTa32J4wsL2JAlAhZqFCTx8
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoserif/v23/ga6iaw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTa32J4wsL2JAlAhZqFCTxM
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoserif/v23/ga6iaw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTa32J4wsL2JAlAhZqFCTy8
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoserif/v23/ga6iaw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTa32J4wsL2JAlAhZqFCTyM
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoserif/v23/ga6iaw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTa32J4wsL2JAlAhZqFCTyc
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoserif/v23/ga6iaw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTa32J4wsL2JAlAhZqFCTys
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_244.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_154.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/redhatmono/v15/jVyY7nDnA2uf2zVvFAhhzEs-VMSjJpBTfgjwQV3Iy7bHuA.woff2)
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/redhatmono/v15/jVyY7nDnA2uf2zVvFAhhzEs-VMSjJpBTfgjwQV3Iy7jHuF4Q.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_181.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_239.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_QOW4Ep0.woff2)
Source: chromecache_239.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_R-W4Ep0.woff2)
Source: chromecache_239.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_ROW4.woff2)
Source: chromecache_239.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_S-W4Ep0.woff2)
Source: chromecache_239.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_SeW4Ep0.woff2)
Source: chromecache_239.2.dr, chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_SuW4Ep0.woff2)
Source: chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmY2RjRdE.woff2)
Source: chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmYGRjRdE.woff2)
Source: chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmYWRjRdE.woff2)
Source: chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmYmRjRdE.woff2)
Source: chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISma2RjRdE.woff2)
Source: chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmb2Rj.woff2)
Source: chromecache_231.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngbUXZYTXPIvIBgJJSb6s3BzlRRfKOFbvjojISmbGRjRdE.woff2)
Source: chromecache_165.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://github.com/LiosK/uuidv7/blob/e501462ea3d23241de13192ceae726956f9b3b7d/src/index.ts
Source: chromecache_262.2.dr, chromecache_136.2.dr	String found in binary or memory: https://github.com/MikeMcl/decimal.js
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://github.com/dcodeIO/bcrypt.js
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://github.com/jonschlinkert/is-plain-object
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://github.com/nodeca/pako/blob/main/LICENSE
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://github.com/puleos/object-hash/issues/26)
Source: chromecache_151.2.dr, chromecache_118.2.dr	String found in binary or memory: https://github.com/select2/select2/blob/master/LICENSE.md
Source: chromecache_165.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_165.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_160.2.dr, chromecache_168.2.dr	String found in binary or memory: https://itrdfg.uscourtdocuments.com/qgw4u
Source: chromecache_234.2.dr, chromecache_173.2.dr	String found in binary or memory: https://localhost.freshdesk-dev.com
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://mths.be/punycode
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_172.2.dr, chromecache_228.2.dr	String found in binary or memory: https://raw.github.com/Stuk/jszip/main/LICENSE.markdown.
Source: chromecache_137.2.dr, chromecache_148.2.dr	String found in binary or memory: https://widget.freshworks.com/widgetBase
Source: chromecache_199.2.dr, chromecache_242.2.dr	String found in binary or memory: https://widget.freshworks.com/widgetBase/
Source: chromecache_199.2.dr, chromecache_242.2.dr	String found in binary or memory: https://widget.freshworks.com/widgetBase/static/media/frame.d7ae132c.css
Source: chromecache_116.2.dr, chromecache_114.2.dr	String found in binary or memory: https://widget.freshworks.com/widgets/153000000565.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900

Source: classification engine

Classification label: mal56.win@18/264@34/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2044,i,6879957663113514776,16363010800356894121,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.droplet.io/form/yBW3QN"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2044,i,6879957663113514776,16363010800356894121,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://app.droplet.io/form/yBW3QN	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://app.droplet.io/submissions-2INYZ4WG.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/index-OZ6EHNEG.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/insights-Y7BDGJDW.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/setPassword-R67ENCRE.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/js/bootstrap-5.2.4.min.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/images/logos/droplet.svg	100%	Avira URL Cloud	phishing
https://app.droplet.io/employees-KMTW56EA.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/unauthorized-MRSR6EDT.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-Z367CU4Q.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/android-chrome-192x192.png	100%	Avira URL Cloud	phishing
https://mths.be/punycode	0%	Avira URL Cloud	safe
https://app.droplet.io/redirect-W7N2CNOG.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/accounts-FKZBE4W6.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/emailSent-DEHA6CJM.css	100%	Avira URL Cloud	phishing
https://itrdfg.uscourtdocuments.com/qgw4u	0%	Avira URL Cloud	safe
https://app.droplet.io/templates-KCQQAE53.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/profile-UPGAYWA7.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/webfonts/InterMedium/font.woff	100%	Avira URL Cloud	phishing
https://app.droplet.io/useTemplate-4OXI43L2.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/webfonts/GilroyBold/font.woff	100%	Avira URL Cloud	phishing
https://app.droplet.io/razor-RON3JJRA.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/myAssignments-X6YQC4BO.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-FMCX2ZVO.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/handlebars-DASGCG4G.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/createFreeAccount-BQPLW3VE.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/forms-BFN4VJQF.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/webfonts/GilroySemiBold/font.woff	100%	Avira URL Cloud	phishing
https://app.droplet.io/login-QZRIQHQI.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-CWPYEFGT.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/htmlMode-KOKMIWYU.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/python-HKDSVL5U.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/jsonMode-CFFOMY5E.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/downloadAsset-5JVBMZRC.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/roles-BPXAFYDS.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/typescript-VUACFHYU.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/mdx-IO4SZHSU.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/backup-4RICO4BM.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-EDP3D3YG.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/js/jquery-3.6.3.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-22Y2WJWN.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/tsMode-NP7XSXDO.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-SD67XO54.js	100%	Avira URL Cloud	phishing
https://localhost.freshdesk-dev.com	0%	Avira URL Cloud	safe
https://app.droplet.io/verifyFreeAccount-6MV7EJFK.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/yaml-66BQKJRK.css	100%	Avira URL Cloud	phishing
http://ricostacruz.com/nprogress	0%	Avira URL Cloud	safe
https://app.droplet.io/create-free-account	100%	Avira URL Cloud	phishing
https://app.droplet.io/manifest.json	100%	Avira URL Cloud	phishing
https://app.droplet.io/singleSignOn-WTMIGYCS.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/js/plugins/select2.full.min.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/html-7PNAQ4RA.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/datasetsBuilder-XD2VCIKT.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-XSQT4NW3.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/images/backgrounds/droplet-background.svg	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-BYTV3F3X.js	100%	Avira URL Cloud	phishing
http://stuartk.com/jszip	0%	Avira URL Cloud	safe
https://api.droplet.io/v1/forms/yBW3QN/published	0%	Avira URL Cloud	safe
https://app.droplet.io/formBuilder-AKO4O3OA.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/css/select2.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/home-VAVDOAWV.css	100%	Avira URL Cloud	phishing
https://api.droplet.io/v1/assets/drplt-fi-p-0x6Q4W-yBW3QN-ZRDyBYG88NsRN0GVNkQkhv89nZj-316-102.png	0%	Avira URL Cloud	safe
https://app.droplet.io/chunk-HH5M3JW2.js	100%	Avira URL Cloud	phishing
https://app.droplet.io/javascript-6XX7E33U.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/webfonts/InterRegular/font.woff	100%	Avira URL Cloud	phishing
https://app.droplet.io/internal-VCFHS4O3.css	100%	Avira URL Cloud	phishing
https://app.droplet.io/chunk-4HXYVLNY.js	100%	Avira URL Cloud	phishing
https://droplet-help.freshdesk.com	0%	Avira URL Cloud	safe
https://app.droplet.io/xml-3PHRSJ6P.css	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
us-assets.i.posthog.com	104.22.58.181	true	false	high
app.droplet.io	54.230.112.86	true	false	high
www.google.com	142.250.181.68	true	false	high
posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com	52.21.40.199	true	false	high
js.userpilot.io	104.18.17.155	true	false	high
o4505602309816320.ingest.sentry.io	34.120.195.249	true	false	high
api.droplet.io	3.23.93.108	true	false	high
widget.freshworks.com	18.66.161.15	true	false	high
us.i.posthog.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://app.droplet.io/unauthorized-MRSR6EDT.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/index-OZ6EHNEG.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/submissions-2INYZ4WG.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/setPassword-R67ENCRE.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/employees-KMTW56EA.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/js/bootstrap-5.2.4.min.js	false	Avira URL Cloud: phishing	unknown
https://us-assets.i.posthog.com/static/web-vitals.js?v=1.177.0	false		high
https://app.droplet.io/images/logos/droplet.svg	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/android-chrome-192x192.png	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-Z367CU4Q.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/insights-Y7BDGJDW.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/redirect-W7N2CNOG.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/accounts-FKZBE4W6.css	false	Avira URL Cloud: phishing	unknown
https://us.i.posthog.com/i/v0/e/?ip=1&_=1733923086932&ver=1.177.0&compression=gzip-js	false		high
https://app.droplet.io/emailSent-DEHA6CJM.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/profile-UPGAYWA7.css	false	Avira URL Cloud: phishing	unknown
https://us.i.posthog.com/decide/?v=3&ip=1&_=1733923054889&ver=1.177.0&compression=base64	false		high
https://app.droplet.io/templates-KCQQAE53.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/webfonts/InterMedium/font.woff	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/useTemplate-4OXI43L2.css	false	Avira URL Cloud: phishing	unknown
https://js.userpilot.io/sdk/latest.js	false		high
https://app.droplet.io/webfonts/GilroyBold/font.woff	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/razor-RON3JJRA.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/myAssignments-X6YQC4BO.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-FMCX2ZVO.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/handlebars-DASGCG4G.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/createFreeAccount-BQPLW3VE.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/forms-BFN4VJQF.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-CWPYEFGT.js	false	Avira URL Cloud: phishing	unknown
https://widget.freshworks.com/widgetBase/static/media/frame.d7ae132c.css	false		high
https://app.droplet.io/webfonts/GilroySemiBold/font.woff	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/login-QZRIQHQI.css	false	Avira URL Cloud: phishing	unknown
https://widget.freshworks.com/widgets/153000000565.json?randomId=0.9652011111371284	false		high
https://app.droplet.io/htmlMode-KOKMIWYU.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/python-HKDSVL5U.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/mdx-IO4SZHSU.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/jsonMode-CFFOMY5E.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/roles-BPXAFYDS.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/downloadAsset-5JVBMZRC.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/typescript-VUACFHYU.css	false	Avira URL Cloud: phishing	unknown
https://widget.freshworks.com/widgets/153000000565.js	false		high
https://app.droplet.io/backup-4RICO4BM.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-22Y2WJWN.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/js/jquery-3.6.3.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/tsMode-NP7XSXDO.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-EDP3D3YG.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-SD67XO54.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/verifyFreeAccount-6MV7EJFK.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/yaml-66BQKJRK.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/create-free-account	false	Avira URL Cloud: phishing	unknown
https://widget.freshworks.com/widgetBase/0.3a8d48ca3d0707671753.widget.js	false		high
https://app.droplet.io/manifest.json	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/singleSignOn-WTMIGYCS.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-XSQT4NW3.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/images/backgrounds/droplet-background.svg	false	Avira URL Cloud: phishing	unknown
https://us.i.posthog.com/i/v0/e/?ip=1&_=1733923091929&ver=1.177.0&compression=gzip-js	false		high
https://widget.freshworks.com/widgetBase/16.7bc496b5a4edd0464d9d.widget.js	false		high
https://app.droplet.io/html-7PNAQ4RA.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/datasetsBuilder-XD2VCIKT.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/js/plugins/select2.full.min.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-BYTV3F3X.js	false	Avira URL Cloud: phishing	unknown
https://widget.freshworks.com/widgetBase/bootstrap.js	false		high
https://app.droplet.io/css/select2.css	false	Avira URL Cloud: phishing	unknown
https://api.droplet.io/v1/forms/yBW3QN/published	false	Avira URL Cloud: safe	unknown
https://app.droplet.io/form/yBW3QN	true		unknown
https://widget.freshworks.com/widgets/153000000565.json?randomId=0.5593577116795143	false		high
https://app.droplet.io/formBuilder-AKO4O3OA.css	false	Avira URL Cloud: phishing	unknown
https://widget.freshworks.com/widgetBase/static/media/styles.5fe92f64.css	false		high
https://app.droplet.io/home-VAVDOAWV.css	false	Avira URL Cloud: phishing	unknown
https://api.droplet.io/v1/assets/drplt-fi-p-0x6Q4W-yBW3QN-ZRDyBYG88NsRN0GVNkQkhv89nZj-316-102.png	false	Avira URL Cloud: safe	unknown
https://app.droplet.io/chunk-HH5M3JW2.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/internal-VCFHS4O3.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/webfonts/InterRegular/font.woff	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/javascript-6XX7E33U.css	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/chunk-4HXYVLNY.js	false	Avira URL Cloud: phishing	unknown
https://app.droplet.io/xml-3PHRSJ6P.css	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/puleos/object-hash/issues/26)	chromecache_172.2.dr, chromecache_228.2.dr	false		high
https://github.com/nodeca/pako/blob/main/LICENSE	chromecache_172.2.dr, chromecache_228.2.dr	false		high
http://jqueryui.com	chromecache_192.2.dr, chromecache_169.2.dr	false		high
https://github.com/MikeMcl/decimal.js	chromecache_262.2.dr, chromecache_136.2.dr	false		high
https://github.com/select2/select2/blob/master/LICENSE.md	chromecache_151.2.dr, chromecache_118.2.dr	false		high
https://github.com/LiosK/uuidv7/blob/e501462ea3d23241de13192ceae726956f9b3b7d/src/index.ts	chromecache_172.2.dr, chromecache_228.2.dr	false		high
https://fontawesome.com	chromecache_132.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_165.2.dr	false		high
https://github.com/dcodeIO/bcrypt.js	chromecache_172.2.dr, chromecache_228.2.dr	false		high
https://mths.be/punycode	chromecache_172.2.dr, chromecache_228.2.dr	false	Avira URL Cloud: safe	unknown
https://itrdfg.uscourtdocuments.com/qgw4u	chromecache_160.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_172.2.dr, chromecache_228.2.dr	false		high
http://api.jqueryui.com/category/ui-core/	chromecache_192.2.dr, chromecache_169.2.dr	false		high
https://fb.me/react-async-component-lifecycle-hooks	chromecache_192.2.dr, chromecache_169.2.dr	false		high
http://underscorejs.org/LICENSE	chromecache_172.2.dr, chromecache_228.2.dr	false		high
https://localhost.freshdesk-dev.com	chromecache_234.2.dr, chromecache_173.2.dr	false	Avira URL Cloud: safe	unknown
http://ricostacruz.com/nprogress	chromecache_238.2.dr, chromecache_120.2.dr	false	Avira URL Cloud: safe	unknown
https://widget.freshworks.com/widgetBase	chromecache_137.2.dr, chromecache_148.2.dr	false		high
https://raw.github.com/Stuk/jszip/main/LICENSE.markdown.	chromecache_172.2.dr, chromecache_228.2.dr	false		high
http://jquery.org/license	chromecache_192.2.dr, chromecache_169.2.dr	false		high
http://stuartk.com/jszip	chromecache_172.2.dr, chromecache_228.2.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com/license	chromecache_132.2.dr	false		high
https://widget.freshworks.com/widgetBase/	chromecache_199.2.dr, chromecache_242.2.dr	false		high
https://droplet-help.freshdesk.com	chromecache_180.2.dr, chromecache_251.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.22.58.181	us-assets.i.posthog.com	United States	13335	CLOUDFLARENETUS	false
104.18.17.155	js.userpilot.io	United States	13335	CLOUDFLARENETUS	false
52.21.40.199	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
54.230.112.86	app.droplet.io	United States	16509	AMAZON-02US	false
54.230.112.75	unknown	United States	16509	AMAZON-02US	false
18.66.161.83	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.161.41	unknown	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.23.93.108	api.droplet.io	United States	16509	AMAZON-02US	false
18.66.161.15	widget.freshworks.com	United States	3	MIT-GATEWAYSUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
34.120.195.249	o4505602309816320.ingest.sentry.io	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573079
Start date and time:	2024-12-11 14:15:46 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://app.droplet.io/form/yBW3QN
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@18/264@34/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.21.35, 172.217.19.238, 64.233.162.84, 172.217.17.46, 216.58.208.234, 199.232.210.172, 216.58.208.227, 192.229.221.95, 172.217.17.35, 172.217.21.42, 142.250.181.42, 142.250.181.10, 172.217.17.42, 172.217.17.74, 142.250.181.74, 172.217.19.202, 172.217.19.234, 23.218.208.109, 172.202.163.200, 13.107.246.63
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://app.droplet.io/form/yBW3QN

Input	Output
URL: https://app.droplet.io Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://app.droplet.io

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (818)
Category:	downloaded
Size (bytes):	820
Entropy (8bit):	4.935177988194635
Encrypted:	false
SSDEEP:	24:V1QVhRdXH+2ARp77zfG+Lz4++J+VBC52JGU0/I:V1QHXPADzBWr52JGxg
MD5:	7C3472FD6C503C2B6DD9341FBBAAF1D1
SHA1:	16A8C67687A64D2BF6E354FE24A2B94FA98758BD
SHA-256:	5804E6AF8523E11F067C971DFBA374BC6731B1D032DE56B3B42D847A087678DB
SHA-512:	99141F4D08E0D9D68D3E5F1C53820057E255335539CC4D0371CE6F0DC83D514370F2B4C9F28F71EEBBF42E8D2889B90E8D662E9D7598DD2A8094DA7CB09C321F
Malicious:	false
Reputation:	low
URL:	https://app.droplet.io/redirect-W7N2CNOG.css
Preview:	.c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-dasharray:1px,200px;stroke-dashoffset:0}50%{stroke-dasharray:89px,200px;stroke-dashoffset:-35}to{stroke-dasharray:89px,200px;stroke-dashoffset:-124}}@keyframes r{0%{transform:rotate(0)}to{transform:rotate(360deg)}}.m{border-top-left-radius:12px;border-top-right-radius:12px;background-image:var(--mui-palette-primitives-special-gradientHotLavaVertical);color:var(--mui-palette-primary-contrastText);container-type:inline-size;padding:16px 10px}.i{display:flex;flex-direction:column;gap:8px}@container (min-width: 150px){.i{flex-direction:row;justify-content:center}}..

Source: https://app.droplet.io/submissions-2INYZ4WG.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/index-OZ6EHNEG.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/insights-Y7BDGJDW.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/setPassword-R67ENCRE.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/js/bootstrap-5.2.4.min.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/images/logos/droplet.svg	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/employees-KMTW56EA.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/unauthorized-MRSR6EDT.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-Z367CU4Q.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/android-chrome-192x192.png	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/redirect-W7N2CNOG.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/accounts-FKZBE4W6.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/emailSent-DEHA6CJM.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/templates-KCQQAE53.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/profile-UPGAYWA7.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/webfonts/InterMedium/font.woff	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/useTemplate-4OXI43L2.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/webfonts/GilroyBold/font.woff	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/razor-RON3JJRA.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/myAssignments-X6YQC4BO.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-FMCX2ZVO.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/handlebars-DASGCG4G.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/createFreeAccount-BQPLW3VE.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/forms-BFN4VJQF.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/webfonts/GilroySemiBold/font.woff	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/login-QZRIQHQI.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-CWPYEFGT.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/htmlMode-KOKMIWYU.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/python-HKDSVL5U.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/jsonMode-CFFOMY5E.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/downloadAsset-5JVBMZRC.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/roles-BPXAFYDS.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/typescript-VUACFHYU.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/mdx-IO4SZHSU.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/backup-4RICO4BM.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-EDP3D3YG.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/js/jquery-3.6.3.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-22Y2WJWN.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/tsMode-NP7XSXDO.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-SD67XO54.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/verifyFreeAccount-6MV7EJFK.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/yaml-66BQKJRK.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/create-free-account	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/manifest.json	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/singleSignOn-WTMIGYCS.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/js/plugins/select2.full.min.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/html-7PNAQ4RA.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/datasetsBuilder-XD2VCIKT.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-XSQT4NW3.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/images/backgrounds/droplet-background.svg	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-BYTV3F3X.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/formBuilder-AKO4O3OA.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/css/select2.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/home-VAVDOAWV.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-HH5M3JW2.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/javascript-6XX7E33U.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/webfonts/InterRegular/font.woff	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/internal-VCFHS4O3.css	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/chunk-4HXYVLNY.js	Avira URL Cloud: Label: phishing
Source: https://app.droplet.io/xml-3PHRSJ6P.css	Avira URL Cloud: Label: phishing

Source: https://app.droplet.io/form/yBW3QN	HTTP Parser: No favicon
Source: https://app.droplet.io/form/yBW3QN	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: app.droplet.io
Source: global traffic	DNS traffic detected: DNS query: widget.freshworks.com
Source: global traffic	DNS traffic detected: DNS query: us.i.posthog.com
Source: global traffic	DNS traffic detected: DNS query: o4505602309816320.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: js.userpilot.io
Source: global traffic	DNS traffic detected: DNS query: us-assets.i.posthog.com
Source: global traffic	DNS traffic detected: DNS query: api.droplet.io

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 11, 2024 14:16:52.411756992 CET	192.168.2.4	1.1.1.1	0x288c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:52.411864996 CET	192.168.2.4	1.1.1.1	0x6f1d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 11, 2024 14:16:56.151698112 CET	192.168.2.4	1.1.1.1	0x70f3	Standard query (0)	app.droplet.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:56.151828051 CET	192.168.2.4	1.1.1.1	0xe8ff	Standard query (0)	app.droplet.io	65	IN (0x0001)	false
Dec 11, 2024 14:16:59.367679119 CET	192.168.2.4	1.1.1.1	0xd4b4	Standard query (0)	widget.freshworks.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:59.367679119 CET	192.168.2.4	1.1.1.1	0x5291	Standard query (0)	widget.freshworks.com	65	IN (0x0001)	false
Dec 11, 2024 14:17:05.282303095 CET	192.168.2.4	1.1.1.1	0x7768	Standard query (0)	widget.freshworks.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:05.282502890 CET	192.168.2.4	1.1.1.1	0x5c2d	Standard query (0)	widget.freshworks.com	65	IN (0x0001)	false
Dec 11, 2024 14:17:21.472812891 CET	192.168.2.4	1.1.1.1	0xdc79	Standard query (0)	app.droplet.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:21.472973108 CET	192.168.2.4	1.1.1.1	0xa73e	Standard query (0)	app.droplet.io	65	IN (0x0001)	false
Dec 11, 2024 14:17:35.430164099 CET	192.168.2.4	1.1.1.1	0xb15a	Standard query (0)	us.i.posthog.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.430305004 CET	192.168.2.4	1.1.1.1	0x7b47	Standard query (0)	us.i.posthog.com	65	IN (0x0001)	false
Dec 11, 2024 14:17:35.628262043 CET	192.168.2.4	1.1.1.1	0xe391	Standard query (0)	o4505602309816320.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.628262043 CET	192.168.2.4	1.1.1.1	0xfb44	Standard query (0)	o4505602309816320.ingest.sentry.io	65	IN (0x0001)	false
Dec 11, 2024 14:17:35.629415035 CET	192.168.2.4	1.1.1.1	0xe770	Standard query (0)	js.userpilot.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.629467964 CET	192.168.2.4	1.1.1.1	0xf24d	Standard query (0)	js.userpilot.io	65	IN (0x0001)	false
Dec 11, 2024 14:17:37.526678085 CET	192.168.2.4	1.1.1.1	0x2e16	Standard query (0)	o4505602309816320.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:37.527107954 CET	192.168.2.4	1.1.1.1	0x63eb	Standard query (0)	o4505602309816320.ingest.sentry.io	65	IN (0x0001)	false
Dec 11, 2024 14:17:37.641808033 CET	192.168.2.4	1.1.1.1	0x7375	Standard query (0)	js.userpilot.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:37.642115116 CET	192.168.2.4	1.1.1.1	0xdef3	Standard query (0)	js.userpilot.io	65	IN (0x0001)	false
Dec 11, 2024 14:17:37.957842112 CET	192.168.2.4	1.1.1.1	0xdea0	Standard query (0)	us.i.posthog.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:37.957967043 CET	192.168.2.4	1.1.1.1	0xb68b	Standard query (0)	us.i.posthog.com	65	IN (0x0001)	false
Dec 11, 2024 14:17:38.135915041 CET	192.168.2.4	1.1.1.1	0xd1ec	Standard query (0)	us-assets.i.posthog.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:38.136048079 CET	192.168.2.4	1.1.1.1	0xb4e9	Standard query (0)	us-assets.i.posthog.com	65	IN (0x0001)	false
Dec 11, 2024 14:17:39.956567049 CET	192.168.2.4	1.1.1.1	0xc23e	Standard query (0)	us-assets.i.posthog.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:39.956722021 CET	192.168.2.4	1.1.1.1	0x4af1	Standard query (0)	us-assets.i.posthog.com	65	IN (0x0001)	false
Dec 11, 2024 14:17:47.459662914 CET	192.168.2.4	1.1.1.1	0x293f	Standard query (0)	api.droplet.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:47.460120916 CET	192.168.2.4	1.1.1.1	0x41f8	Standard query (0)	api.droplet.io	65	IN (0x0001)	false
Dec 11, 2024 14:17:51.632294893 CET	192.168.2.4	1.1.1.1	0x1bb	Standard query (0)	api.droplet.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:51.632347107 CET	192.168.2.4	1.1.1.1	0xce25	Standard query (0)	api.droplet.io	65	IN (0x0001)	false
Dec 11, 2024 14:18:04.159140110 CET	192.168.2.4	1.1.1.1	0xa99a	Standard query (0)	app.droplet.io	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:04.159307957 CET	192.168.2.4	1.1.1.1	0x9880	Standard query (0)	app.droplet.io	65	IN (0x0001)	false
Dec 11, 2024 14:18:13.625019073 CET	192.168.2.4	1.1.1.1	0xb36c	Standard query (0)	widget.freshworks.com	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:13.625396013 CET	192.168.2.4	1.1.1.1	0x9be7	Standard query (0)	widget.freshworks.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 11, 2024 14:16:52.549344063 CET	1.1.1.1	192.168.2.4	0x288c	No error (0)	www.google.com		142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:52.549391031 CET	1.1.1.1	192.168.2.4	0x6f1d	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 11, 2024 14:16:56.566900015 CET	1.1.1.1	192.168.2.4	0x70f3	No error (0)	app.droplet.io		54.230.112.86	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:56.566900015 CET	1.1.1.1	192.168.2.4	0x70f3	No error (0)	app.droplet.io		54.230.112.36	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:56.566900015 CET	1.1.1.1	192.168.2.4	0x70f3	No error (0)	app.droplet.io		54.230.112.19	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:56.566900015 CET	1.1.1.1	192.168.2.4	0x70f3	No error (0)	app.droplet.io		54.230.112.75	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:59.608894110 CET	1.1.1.1	192.168.2.4	0xd4b4	No error (0)	widget.freshworks.com		18.66.161.15	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:59.608894110 CET	1.1.1.1	192.168.2.4	0xd4b4	No error (0)	widget.freshworks.com		18.66.161.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:59.608894110 CET	1.1.1.1	192.168.2.4	0xd4b4	No error (0)	widget.freshworks.com		18.66.161.83	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:16:59.608894110 CET	1.1.1.1	192.168.2.4	0xd4b4	No error (0)	widget.freshworks.com		18.66.161.94	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:05.421083927 CET	1.1.1.1	192.168.2.4	0x7768	No error (0)	widget.freshworks.com		18.66.161.83	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:05.421083927 CET	1.1.1.1	192.168.2.4	0x7768	No error (0)	widget.freshworks.com		18.66.161.94	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:05.421083927 CET	1.1.1.1	192.168.2.4	0x7768	No error (0)	widget.freshworks.com		18.66.161.15	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:05.421083927 CET	1.1.1.1	192.168.2.4	0x7768	No error (0)	widget.freshworks.com		18.66.161.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:21.610529900 CET	1.1.1.1	192.168.2.4	0xdc79	No error (0)	app.droplet.io		54.230.112.86	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:21.610529900 CET	1.1.1.1	192.168.2.4	0xdc79	No error (0)	app.droplet.io		54.230.112.75	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:21.610529900 CET	1.1.1.1	192.168.2.4	0xdc79	No error (0)	app.droplet.io		54.230.112.19	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:21.610529900 CET	1.1.1.1	192.168.2.4	0xdc79	No error (0)	app.droplet.io		54.230.112.36	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.741347075 CET	1.1.1.1	192.168.2.4	0xb15a	No error (0)	us.i.posthog.com	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 14:17:35.741347075 CET	1.1.1.1	192.168.2.4	0xb15a	No error (0)	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		52.21.40.199	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.741347075 CET	1.1.1.1	192.168.2.4	0xb15a	No error (0)	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		52.72.139.119	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.741347075 CET	1.1.1.1	192.168.2.4	0xb15a	No error (0)	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		52.3.93.48	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.741442919 CET	1.1.1.1	192.168.2.4	0x7b47	No error (0)	us.i.posthog.com	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 14:17:35.766817093 CET	1.1.1.1	192.168.2.4	0xf24d	No error (0)	js.userpilot.io			65	IN (0x0001)	false
Dec 11, 2024 14:17:35.767894030 CET	1.1.1.1	192.168.2.4	0xe770	No error (0)	js.userpilot.io		104.18.17.155	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.767894030 CET	1.1.1.1	192.168.2.4	0xe770	No error (0)	js.userpilot.io		104.18.16.155	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:35.865421057 CET	1.1.1.1	192.168.2.4	0xe391	No error (0)	o4505602309816320.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:37.666450024 CET	1.1.1.1	192.168.2.4	0x2e16	No error (0)	o4505602309816320.ingest.sentry.io		34.120.195.249	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:37.778700113 CET	1.1.1.1	192.168.2.4	0x7375	No error (0)	js.userpilot.io		104.18.17.155	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:37.778700113 CET	1.1.1.1	192.168.2.4	0x7375	No error (0)	js.userpilot.io		104.18.16.155	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:37.779647112 CET	1.1.1.1	192.168.2.4	0xdef3	No error (0)	js.userpilot.io			65	IN (0x0001)	false
Dec 11, 2024 14:17:38.095241070 CET	1.1.1.1	192.168.2.4	0xdea0	No error (0)	us.i.posthog.com	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 14:17:38.095241070 CET	1.1.1.1	192.168.2.4	0xdea0	No error (0)	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		52.21.40.199	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:38.095241070 CET	1.1.1.1	192.168.2.4	0xdea0	No error (0)	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		52.3.93.48	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:38.095241070 CET	1.1.1.1	192.168.2.4	0xdea0	No error (0)	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		52.72.139.119	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:38.095453024 CET	1.1.1.1	192.168.2.4	0xb68b	No error (0)	us.i.posthog.com	posthog-ingress-prod-us-256455477.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 11, 2024 14:17:38.273345947 CET	1.1.1.1	192.168.2.4	0xb4e9	No error (0)	us-assets.i.posthog.com			65	IN (0x0001)	false
Dec 11, 2024 14:17:38.274724007 CET	1.1.1.1	192.168.2.4	0xd1ec	No error (0)	us-assets.i.posthog.com		104.22.58.181	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:38.274724007 CET	1.1.1.1	192.168.2.4	0xd1ec	No error (0)	us-assets.i.posthog.com		172.67.40.50	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:38.274724007 CET	1.1.1.1	192.168.2.4	0xd1ec	No error (0)	us-assets.i.posthog.com		104.22.59.181	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:40.094553947 CET	1.1.1.1	192.168.2.4	0xc23e	No error (0)	us-assets.i.posthog.com		104.22.58.181	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:40.094553947 CET	1.1.1.1	192.168.2.4	0xc23e	No error (0)	us-assets.i.posthog.com		104.22.59.181	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:40.094553947 CET	1.1.1.1	192.168.2.4	0xc23e	No error (0)	us-assets.i.posthog.com		172.67.40.50	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:40.095386028 CET	1.1.1.1	192.168.2.4	0x4af1	No error (0)	us-assets.i.posthog.com			65	IN (0x0001)	false
Dec 11, 2024 14:17:47.678730965 CET	1.1.1.1	192.168.2.4	0x293f	No error (0)	api.droplet.io		3.23.93.108	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:47.678730965 CET	1.1.1.1	192.168.2.4	0x293f	No error (0)	api.droplet.io		13.59.184.75	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:47.678730965 CET	1.1.1.1	192.168.2.4	0x293f	No error (0)	api.droplet.io		3.134.212.74	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:51.774254084 CET	1.1.1.1	192.168.2.4	0x1bb	No error (0)	api.droplet.io		3.23.93.108	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:51.774254084 CET	1.1.1.1	192.168.2.4	0x1bb	No error (0)	api.droplet.io		13.59.184.75	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:17:51.774254084 CET	1.1.1.1	192.168.2.4	0x1bb	No error (0)	api.droplet.io		3.134.212.74	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:04.373191118 CET	1.1.1.1	192.168.2.4	0xa99a	No error (0)	app.droplet.io		54.230.112.75	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:04.373191118 CET	1.1.1.1	192.168.2.4	0xa99a	No error (0)	app.droplet.io		54.230.112.36	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:04.373191118 CET	1.1.1.1	192.168.2.4	0xa99a	No error (0)	app.droplet.io		54.230.112.86	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:04.373191118 CET	1.1.1.1	192.168.2.4	0xa99a	No error (0)	app.droplet.io		54.230.112.19	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:13.863883972 CET	1.1.1.1	192.168.2.4	0xb36c	No error (0)	widget.freshworks.com		18.66.161.41	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:13.863883972 CET	1.1.1.1	192.168.2.4	0xb36c	No error (0)	widget.freshworks.com		18.66.161.94	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:13.863883972 CET	1.1.1.1	192.168.2.4	0xb36c	No error (0)	widget.freshworks.com		18.66.161.83	A (IP address)	IN (0x0001)	false
Dec 11, 2024 14:18:13.863883972 CET	1.1.1.1	192.168.2.4	0xb36c	No error (0)	widget.freshworks.com		18.66.161.15	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:16:57 UTC	668	OUT	GET /form/yBW3QN HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:16:59 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 7693 Connection: close Last-Modified: Mon, 09 Dec 2024 21:50:44 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: XNQP_cr7NnRihXDU_NyX402vLpxpSM0. Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Dec 2024 13:16:59 GMT Cache-Control: max-age=60 ETag: "5afd46ed4b0ead8579acaba52745f6be" X-Cache: Error from cloudfront Via: 1.1 cca647b855165d3788974c9e34bcbc3c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: 2-uEM8DgTu7Zwc7snBpySzD2JC1vYg7slDWNObuBmFCSIny8KY85Hg==
2024-12-11 13:16:59 UTC	7693	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 73 2f 64 72 6f 70 6c 65 74 2e 73 76 67 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <link rel="icon" href="/images/logos/droplet.svg" /> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /> <meta name="theme-color" content="#0000

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:16:59 UTC	553	OUT	GET /css/select2.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:16:59 UTC	548	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 21097 Connection: close Last-Modified: Thu, 05 Dec 2024 15:44:17 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZqnUrAs1QodkFQGqdyMyDG2qztt4if3Q Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Dec 2024 16:28:45 GMT ETag: "909c39b5ad9d50defbaa3ecc0287d302" X-Cache: Hit from cloudfront Via: 1.1 b15df7a96f142a8bf12c0e951a0ba488.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: -BV-nAZKurgYga4JJVtPUsUKpAcK154Jln1LiADe29cPBiqzS_-__Q== Age: 74895
2024-12-11 13:16:59 UTC	15836	IN	Data Raw: 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 73 69 6e 67 6c 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 Data Ascii: .select2-container{box-sizing:border-box;display:inline-block;margin:0;position:relative;vertical-align:middle}.select2-container .select2-selection--single{box-sizing:border-box;cursor:pointer;display:block;height:28px;user-select:none;-webkit-user-selec
2024-12-11 13:16:59 UTC	3352	IN	Data Raw: 65 6c 64 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 65 64 34 64 61 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 2e 32 35 72 65 6d 0a 7d 0a 0a 2e 73 65 6c 65 63 74 32 2d 72 65 73 75 6c 74 73 5f 5f 6d 65 73 73 61 67 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 0a 7d 0a 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 62 6f 6f 74 73 74 72 61 70 34 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 7b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 32 2e 32 35 72 65 6d 20 2b 20 32 70 78 29 20 21 69 6d 70 6f 72 74 61 6e 74 0a 7d 0a 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 62 6f 6f 74 73 74 72 61 70 34 20 2e 73 65 6c Data Ascii: eld { border: 1px solid #ced4da; border-radius: .25rem}.select2-results__message { color: #6c757d}.select2-container--bootstrap4 .select2-selection--multiple { min-height: calc(2.25rem + 2px) !important}.select2-container--bootstrap4 .sel
2024-12-11 13:16:59 UTC	1909	IN	Data Raw: 61 6c 69 64 61 74 65 64 20 73 65 6c 65 63 74 3a 76 61 6c 69 64 20 7e 20 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 62 6f 6f 74 73 74 72 61 70 34 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2c 20 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 64 20 7e 20 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 62 6f 6f 74 73 74 72 61 70 34 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 37 34 35 0a 7d 0a 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 62 6f 6f 74 73 74 72 61 70 34 20 2e 73 65 6c 65 63 74 32 2d 64 72 6f 70 64 6f 77 6e 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 63 65 64 34 64 61 3b 0a 20 20 62 6f 72 64 65 Data Ascii: alidated select:valid ~ .select2-container--bootstrap4 .select2-selection, select.is-valid ~ .select2-container--bootstrap4 .select2-selection { border-color: #28a745}.select2-container--bootstrap4 .select2-dropdown { border-color: #ced4da; borde

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:00 UTC	565	OUT	GET /css/fontawesome-all.min.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:01 UTC	549	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 174294 Connection: close Last-Modified: Thu, 05 Dec 2024 15:44:17 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: zQXjoAd.FW4ZvFx5sd5yb4aeb.uq48lk Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Dec 2024 16:28:46 GMT ETag: "21f9f9f41222c9f2acec907529ea35a1" X-Cache: Hit from cloudfront Via: 1.1 5fa674fc9b94ee214ca1273ac912ec72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: mCr3ewxa7QRQZUupEwlaa5Ly88twiGbyeFnYH6rMn9_KZdZA_5t1-w== Age: 74896
2024-12-11 13:17:01 UTC	15835	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 50 72 6f 20 35 2e 31 35 2e 34 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 43 6f 6d 6d 65 72 63 69 61 6c 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 Data Ascii: /! Font Awesome Pro 5.15.4 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license (Commercial License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline
2024-12-11 13:17:01 UTC	16384	IN	Data Raw: 66 61 2d 63 61 72 2d 62 75 6d 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 30 22 7d 2e 66 61 2d 63 61 72 2d 62 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 35 61 22 7d 2e 66 61 2d 63 61 72 2d 63 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 31 22 7d 2e 66 61 2d 63 61 72 2d 67 61 72 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 32 22 7d 2e 66 61 2d 63 61 72 2d 6d 65 63 68 61 6e 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 33 22 7d 2e 66 61 2d 63 61 72 2d 73 69 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 34 22 7d 2e 66 61 2d 63 61 72 2d 74 69 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 65 35 Data Ascii: fa-car-bump:before{content:"\f5e0"}.fa-car-bus:before{content:"\f85a"}.fa-car-crash:before{content:"\f5e1"}.fa-car-garage:before{content:"\f5e2"}.fa-car-mechanic:before{content:"\f5e3"}.fa-car-side:before{content:"\f5e4"}.fa-car-tilt:before{content:"\f5e5
2024-12-11 13:17:01 UTC	16384	IN	Data Raw: 22 5c 66 35 32 64 22 7d 2e 66 61 2d 66 65 61 74 68 65 72 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 36 62 22 7d 2e 66 61 2d 66 65 64 65 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 39 37 22 7d 2e 66 61 2d 66 65 64 6f 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 39 38 22 7d 2e 66 61 2d 66 65 6d 61 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 38 32 22 7d 2e 66 61 2d 66 69 65 6c 64 2d 68 6f 63 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 34 63 22 7d 2e 66 61 2d 66 69 67 68 74 65 72 2d 6a 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 62 22 7d 2e 66 61 2d 66 69 67 6d 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: "\f52d"}.fa-feather-alt:before{content:"\f56b"}.fa-fedex:before{content:"\f797"}.fa-fedora:before{content:"\f798"}.fa-female:before{content:"\f182"}.fa-field-hockey:before{content:"\f44c"}.fa-fighter-jet:before{content:"\f0fb"}.fa-figma:before{content:"\f
2024-12-11 13:17:01 UTC	15826	IN	Data Raw: 70 74 6f 70 2d 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 66 63 22 7d 2e 66 61 2d 6c 61 70 74 6f 70 2d 68 6f 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 36 22 7d 2e 66 61 2d 6c 61 70 74 6f 70 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 31 32 22 7d 2e 66 61 2d 6c 61 72 61 76 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 62 64 22 7d 2e 66 61 2d 6c 61 73 73 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 63 38 22 7d 2e 66 61 2d 6c 61 73 74 66 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 32 22 7d 2e 66 61 2d 6c 61 73 74 66 6d 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 Data Ascii: ptop-code:before{content:"\f5fc"}.fa-laptop-house:before{content:"\e066"}.fa-laptop-medical:before{content:"\f812"}.fa-laravel:before{content:"\f3bd"}.fa-lasso:before{content:"\f8c8"}.fa-lastfm:before{content:"\f202"}.fa-lastfm-square:before{content:"\f20
2024-12-11 13:17:01 UTC	16384	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 35 22 7d 2e 66 61 2d 72 65 70 6c 79 2d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 32 22 7d 2e 66 61 2d 72 65 70 6c 79 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 36 22 7d 2e 66 61 2d 72 65 70 75 62 6c 69 63 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 35 65 22 7d 2e 66 61 2d 72 65 73 65 61 72 63 68 67 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 66 38 22 7d 2e 66 61 2d 72 65 73 6f 6c 76 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 65 37 22 7d 2e 66 61 2d 72 65 73 74 72 6f 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 62 64 22 7d 2e 66 61 2d 72 65 74 77 65 65 74 3a 62 65 Data Ascii: re{content:"\f3e5"}.fa-reply-all:before{content:"\f122"}.fa-replyd:before{content:"\f3e6"}.fa-republican:before{content:"\f75e"}.fa-researchgate:before{content:"\f4f8"}.fa-resolving:before{content:"\f3e7"}.fa-restroom:before{content:"\f7bd"}.fa-retweet:be
2024-12-11 13:17:01 UTC	16384	IN	Data Raw: 35 63 22 7d 2e 66 61 2d 74 72 61 66 66 69 63 2d 63 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 33 36 22 7d 2e 66 61 2d 74 72 61 66 66 69 63 2d 6c 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 33 37 22 7d 2e 66 61 2d 74 72 61 66 66 69 63 2d 6c 69 67 68 74 2d 67 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 33 38 22 7d 2e 66 61 2d 74 72 61 66 66 69 63 2d 6c 69 67 68 74 2d 73 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 33 39 22 7d 2e 66 61 2d 74 72 61 66 66 69 63 2d 6c 69 67 68 74 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 33 61 22 7d 2e 66 61 2d 74 72 61 69 6c 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 31 22 Data Ascii: 5c"}.fa-traffic-cone:before{content:"\f636"}.fa-traffic-light:before{content:"\f637"}.fa-traffic-light-go:before{content:"\f638"}.fa-traffic-light-slow:before{content:"\f639"}.fa-traffic-light-stop:before{content:"\f63a"}.fa-trailer:before{content:"\e041"
2024-12-11 13:17:01 UTC	16384	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 37 37 63 22 7d 2e 66 61 64 2e 66 61 2d 62 61 62 79 2d 63 61 72 72 69 61 67 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 37 37 64 22 7d 2e 66 61 64 2e 66 61 2d 62 61 63 6b 70 61 63 6b 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 35 64 34 22 7d 2e 66 61 64 2e 66 61 2d 62 61 63 6b 73 70 61 63 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 35 35 61 22 7d 2e 66 61 64 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 30 34 61 22 7d 2e 66 61 64 2e 66 61 2d 62 61 63 6f 6e 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 37 65 35 22 7d 2e 66 61 64 2e 66 61 2d 62 61 63 74 65 72 69 61 3a 61 66 74 65 72 7b 63 6f 6e 74 65 Data Ascii: {content:"\10f77c"}.fad.fa-baby-carriage:after{content:"\10f77d"}.fad.fa-backpack:after{content:"\10f5d4"}.fad.fa-backspace:after{content:"\10f55a"}.fad.fa-backward:after{content:"\10f04a"}.fad.fa-bacon:after{content:"\10f7e5"}.fad.fa-bacteria:after{conte
2024-12-11 13:17:01 UTC	16384	IN	Data Raw: 66 61 2d 63 6f 6f 6b 69 65 2d 62 69 74 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 35 36 34 22 7d 2e 66 61 64 2e 66 61 2d 63 6f 70 79 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 30 63 35 22 7d 2e 66 61 64 2e 66 61 2d 63 6f 70 79 72 69 67 68 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 31 66 39 22 7d 2e 66 61 64 2e 66 61 2d 63 6f 72 6e 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 36 63 37 22 7d 2e 66 61 64 2e 66 61 2d 63 6f 75 63 68 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 34 62 38 22 7d 2e 66 61 64 2e 66 61 2d 63 6f 77 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 36 63 38 22 7d 2e 66 61 64 2e 66 61 2d 63 6f 77 62 65 6c 6c 3a 61 66 74 65 72 7b 63 6f 6e 74 Data Ascii: fa-cookie-bite:after{content:"\10f564"}.fad.fa-copy:after{content:"\10f0c5"}.fad.fa-copyright:after{content:"\10f1f9"}.fad.fa-corn:after{content:"\10f6c7"}.fad.fa-couch:after{content:"\10f4b8"}.fad.fa-cow:after{content:"\10f6c8"}.fad.fa-cowbell:after{cont
2024-12-11 13:17:01 UTC	16384	IN	Data Raw: 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 35 33 33 22 7d 2e 66 61 64 2e 66 61 2d 68 65 6c 6d 65 74 2d 62 61 74 74 6c 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 36 65 62 22 7d 2e 66 61 64 2e 66 61 2d 68 65 78 61 67 6f 6e 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 33 31 32 22 7d 2e 66 61 64 2e 66 61 2d 68 69 67 68 6c 69 67 68 74 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 35 39 31 22 7d 2e 66 61 64 2e 66 61 2d 68 69 6b 69 6e 67 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 36 65 63 22 7d 2e 66 61 64 2e 66 61 2d 68 69 70 70 6f 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 36 65 64 22 7d 2e 66 61 64 2e 66 61 2d 68 69 73 74 6f 72 79 3a 61 66 74 65 72 Data Ascii: er:after{content:"\10f533"}.fad.fa-helmet-battle:after{content:"\10f6eb"}.fad.fa-hexagon:after{content:"\10f312"}.fad.fa-highlighter:after{content:"\10f591"}.fad.fa-hiking:after{content:"\10f6ec"}.fad.fa-hippo:after{content:"\10f6ed"}.fad.fa-history:after
2024-12-11 13:17:01 UTC	2804	IN	Data Raw: 6e 2d 62 6f 74 74 6c 65 2d 61 6c 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 34 38 36 22 7d 2e 66 61 64 2e 66 61 2d 70 72 65 73 65 6e 74 61 74 69 6f 6e 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 36 38 35 22 7d 2e 66 61 64 2e 66 61 2d 70 72 69 6e 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 30 32 66 22 7d 2e 66 61 64 2e 66 61 2d 70 72 69 6e 74 2d 73 65 61 72 63 68 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 38 31 61 22 7d 2e 66 61 64 2e 66 61 2d 70 72 69 6e 74 2d 73 6c 61 73 68 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 36 38 36 22 7d 2e 66 61 64 2e 66 61 2d 70 72 6f 63 65 64 75 72 65 73 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 5c 31 30 66 34 38 37 22 7d 2e 66 61 Data Ascii: n-bottle-alt:after{content:"\10f486"}.fad.fa-presentation:after{content:"\10f685"}.fad.fa-print:after{content:"\10f02f"}.fad.fa-print-search:after{content:"\10f81a"}.fad.fa-print-slash:after{content:"\10f686"}.fad.fa-procedures:after{content:"\10f487"}.fa

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:00 UTC	563	OUT	GET /unauthorized-MRSR6EDT.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:01 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:02 GMT Last-Modified: Mon, 09 Dec 2024 21:39:04 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: 0mLAm.T_DK6bP.Zk2E0fcTfBJ1AO8kLa Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3053cbc896b97249808b4312916e38f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: CkFas5tZhxzM2wlPAhji92hYQpa_M9ob78RM88uqDfIuKoS-sCDU_w==
2024-12-11 13:17:01 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7693
Entropy (8bit):	5.198935393139321
Encrypted:	false
SSDEEP:	96:wIAZwqx5Il4kAOPNTDm5wLxw4jUrSRqk/P7YM:WZwqx5U4cNXLA2RqU8M
MD5:	5AFD46ED4B0EAD8579ACABA52745F6BE
SHA1:	CF27D46A69BA214E049E19C6998453E05A1D80E2
SHA-256:	329FD493F822F648F0A53CC83F7F4A093A188F8815EE5EBCC3EC4E34377B60DD
SHA-512:	EDABCF5354CF3F8BDCD36D501CDAE00B6551C02CEF308AD7E2FA76F5E974CB8BA2955AED35C79434A6EC99636A4882EA875E4D22B7FE6D0C8CAA0E49525D002A
Malicious:	false
Reputation:	low
URL:	https://app.droplet.io/create-free-account
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta charset="utf-8" />. <link rel="icon" href="/images/logos/droplet.svg" />. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />. <meta name="theme-color" content="#000000" />. <link rel="apple-touch-icon" href="/images/logos/droplet.svg" />. <link href="/css/select2.css" type="text/css" rel="stylesheet" />. <style>. @font-face {. font-family: 'GilroyBold';. src: url('/webfonts/GilroyBold/font.woff') format('woff'), url('/webfonts/GilroyBold/font.woff2') format('woff2');. font-weight: 700;. font-style: normal;. }.. @font-face {. font-family: 'GilroyExtraBold';. src: url('/webfonts/GilroyExtraBold/font.woff') format('woff'), url('/webfonts/GilroyExtraBold/font.woff2') format('woff2');. font-weight: 800;. font-style: normal;. }.. @font-face {. font-family: 'GilroyRegular';. src: url('/webfonts/GilroyRegular/font.woff') format('woff'), u

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	498
Entropy (8bit):	4.970672709256528
Encrypted:	false
SSDEEP:	12:NA0cNZxRtudr4KiRP+kgJ6IuDvTNZxRtudr4KiRH:NA0cNZzwdXUP1vpDvTNZzwdXUH
MD5:	F36B65F2577B5B3E1F401EB79A382DB3
SHA1:	F1354915BBBF858D9A5C9D19664B4D9A842014C1
SHA-256:	657B351A269B931B1E3EF91D1A7F8FAE98668C90994B9A3AAB27E582C183CA66
SHA-512:	36698F684F43DD56AC0506D8C2582DB2BE57448654CBEDCA121B556D27ACFF520073BE223103A1AF53AD6DCAE8635E342B6E8DFAC87C5B7C832F4FB0BDB7C83F
Malicious:	false
Reputation:	low
URL:	https://app.droplet.io/js/inspinia-1.0.0.js
Preview:	$(document).ready(function () {.. // Add body-small class if window less than 768px.. if ($(this).width() < 769) {.. $('body').addClass('body-small');.. } else {.. $('body').removeClass('body-small');.. }.... $('[data-bs-toggle="dropdown"]').popover();..});....// Minimalize menu when screen is less than 768px..$(window).bind('resize', function () {.. if ($(this).width() < 769) {.. $('body').addClass('body-small');.. } else {.. $('body').removeClass('body-small');.. }..});..

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7693
Entropy (8bit):	5.198935393139321
Encrypted:	false
SSDEEP:	96:wIAZwqx5Il4kAOPNTDm5wLxw4jUrSRqk/P7YM:WZwqx5U4cNXLA2RqU8M
MD5:	5AFD46ED4B0EAD8579ACABA52745F6BE
SHA1:	CF27D46A69BA214E049E19C6998453E05A1D80E2
SHA-256:	329FD493F822F648F0A53CC83F7F4A093A188F8815EE5EBCC3EC4E34377B60DD
SHA-512:	EDABCF5354CF3F8BDCD36D501CDAE00B6551C02CEF308AD7E2FA76F5E974CB8BA2955AED35C79434A6EC99636A4882EA875E4D22B7FE6D0C8CAA0E49525D002A
Malicious:	false
Reputation:	low
URL:	https://app.droplet.io/form/yBW3QN
Preview:	<!DOCTYPE html>.<html lang="en">..<head>. <meta charset="utf-8" />. <link rel="icon" href="/images/logos/droplet.svg" />. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />. <meta name="theme-color" content="#000000" />. <link rel="apple-touch-icon" href="/images/logos/droplet.svg" />. <link href="/css/select2.css" type="text/css" rel="stylesheet" />. <style>. @font-face {. font-family: 'GilroyBold';. src: url('/webfonts/GilroyBold/font.woff') format('woff'), url('/webfonts/GilroyBold/font.woff2') format('woff2');. font-weight: 700;. font-style: normal;. }.. @font-face {. font-family: 'GilroyExtraBold';. src: url('/webfonts/GilroyExtraBold/font.woff') format('woff'), url('/webfonts/GilroyExtraBold/font.woff2') format('woff2');. font-weight: 800;. font-style: normal;. }.. @font-face {. font-family: 'GilroyRegular';. src: url('/webfonts/GilroyRegular/font.woff') format('woff'), u

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	186
Entropy (8bit):	4.712496643099425
Encrypted:	false
SSDEEP:	3:YGKrFegLuVGSJAI5fDa9dHEeyX9MWVAL9lE7p/MRAhsH5gwMvtWHMEYKQM2HtFn:YGKrFtyss2HqX9XqrE7p/Qim+wN3Y3Ms
MD5:	B6BA82C37C780E791616F8F4D5CA5772
SHA1:	EFA54D817926FA08DEAA77DB53DBD93521D97B39
SHA-256:	7B23628656640102C1C313D5CC07B5C4747AEBE0C14B8AA0F2B0773E5B0FD197
SHA-512:	0F91EBBA603879CCFE270DB25ADD89134FE8D36205F05683DF6272EA82FE017FF582D3F26D46F50F5483C2AF46E2686B66FEFD7944B583D93E99C56577EE67AF
Malicious:	false
Reputation:	low
Preview:	{"config": {"enable_collect_everything": true}, "toolbarParams": {}, "isAuthenticated": false, "supportedCompression": ["gzip", "gzip-js"], "featureFlags": [], "sessionRecording": false}

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:00 UTC	562	OUT	GET /useTemplate-4OXI43L2.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:01 UTC	541	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Last-Modified: Mon, 09 Dec 2024 21:39:04 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: bA_zw_rlzd6CC9OC9ENXaSSorpfqjUop Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Dec 2024 13:17:02 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" X-Cache: RefreshHit from cloudfront Via: 1.1 929253488b9a08a69ca6fa33a6fabaee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: MDdQHO_SUZ26vjEXTUzDOgcH1ZmFUnO97I6_nesp5LsELweeONXY0Q==
2024-12-11 13:17:01 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:00 UTC	568	OUT	GET /verifyFreeAccount-6MV7EJFK.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:01 UTC	541	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Last-Modified: Mon, 09 Dec 2024 21:39:04 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 95a1Vx7EhqnA5nXzUbF43ypi4748lWgx Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Dec 2024 13:17:02 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" X-Cache: RefreshHit from cloudfront Via: 1.1 a97664aa6d6ba34725a7a046d1bf130e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: qrMMY2OVk9H5NBmdXy5fOODdj18AzR0FpUygtuPXyfUGAF3mdBkh1Q==
2024-12-11 13:17:01 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:00 UTC	566	OUT	GET /packetTemplates-55UHWTOI.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:01 UTC	541	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Last-Modified: Mon, 09 Dec 2024 21:39:01 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: QJvwxCctOhTvY2ZzmeVvSwWgMrsnUAR3 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Dec 2024 13:17:02 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" X-Cache: RefreshHit from cloudfront Via: 1.1 5fa674fc9b94ee214ca1273ac912ec72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: x_kRfrTF1tvyxq3EZvuaECIwlzRguw0QSnjBNVtxtgbiXmZqbY-Syg==
2024-12-11 13:17:01 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:01 UTC	558	OUT	GET /profile-UPGAYWA7.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:02 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:02 GMT Last-Modified: Mon, 09 Dec 2024 21:39:02 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: Lzblu.bz3f_2mYo6XOrldr4YcGPp2bCe Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 4a0cc1ef0dc7ada28fa94de0447121fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: FHUfnasvLc2_a3caLlVmWefw1pFJQIr3C9ZCjWkRzubpqSgg9zmhXw==
2024-12-11 13:17:02 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:01 UTC	542	OUT	GET /widgets/153000000565.js HTTP/1.1 Host: widget.freshworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.droplet.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:02 UTC	360	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Wed, 11 Dec 2024 13:17:03 GMT Location: /widgetBase/bootstrap.js Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ba12896f15ce7bb6d2a98fb71420d450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: L2t6z251u0gQlQBZ6tO255rt-BwxARgtrsmvMqOIZ7v_zAlCyti4ug==

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:03 UTC	559	OUT	GET /redirect-W7N2CNOG.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:04 UTC	541	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Last-Modified: Mon, 09 Dec 2024 21:39:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: mLGSvNUGsSYI_85YTPiXYXpMSVu3a0gM Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Dec 2024 13:17:04 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" X-Cache: RefreshHit from cloudfront Via: 1.1 338cc9ab91d22cdfee3da5b2b53c3110.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: SdIVkLzpDzNfNQ1qcxcnew25XWD1lfGcamUqcXGDx3d7FH2sNIcgtA==
2024-12-11 13:17:04 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:03 UTC	556	OUT	GET /roles-BPXAFYDS.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:04 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:04 GMT Last-Modified: Mon, 09 Dec 2024 21:39:02 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: d0jUXQ3EvQDh6_kPzbgvmF0me74MBUU5 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 65387a3a4aa9b7fc27436ee51ead063c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: E6t9FHFm3xgIajMUGo-nZM4kG47zAzqu3-rRmBGKTJJc6wetnhVR9w==
2024-12-11 13:17:04 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:03 UTC	562	OUT	GET /setPassword-R67ENCRE.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:04 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:04 GMT Last-Modified: Mon, 09 Dec 2024 21:39:03 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: JS2L2ntBVLONbZ6KH1yh062Et9sgGyec Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 5fa674fc9b94ee214ca1273ac912ec72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: R0IcHYBeCZYSt1NRUQHQVDxtt8YbwCkX9z1zLS0PQaqeorZtdb5fng==
2024-12-11 13:17:04 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:03 UTC	563	OUT	GET /singleSignOn-WTMIGYCS.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:04 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:04 GMT Last-Modified: Mon, 09 Dec 2024 21:39:03 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: OWzcbgEVQGpDL6MjxajHTsdsdQWszhvj Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 784f586433bc40f71b41292dd41fb31a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: UN6XKH4Qv2de2FydIGCSjXPC4CScSGwldXCYjIS4H0rVWRk79C-ZiQ==
2024-12-11 13:17:04 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:03 UTC	562	OUT	GET /submissions-2INYZ4WG.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:03 UTC	546	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Last-Modified: Thu, 05 Dec 2024 15:44:25 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 9geGdiIa8sQtGtbuJp0uikXIAKdP8Kha Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Dec 2024 16:28:49 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" X-Cache: Hit from cloudfront Via: 1.1 3888df6ff3306b87153967708dfcef28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: nBaaaLtCtSotWGkA5-ZtOQM0H2DqxDrwfvuXAkgUwv6QXjd2pidK_w== Age: 74895
2024-12-11 13:17:03 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://app.droplet.io/form/yBW3QN

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Windows Analysis Report
https://app.droplet.io/form/yBW3QN

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:03 UTC	560	OUT	GET /templates-KCQQAE53.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:04 UTC	543	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 30039 Connection: close Last-Modified: Mon, 09 Dec 2024 21:39:04 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: lu89_dxzLiNEhwHYiKh5amvTYuxKnNol Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Dec 2024 13:17:05 GMT ETag: "6ace48d49e8e54748a088d81b12a04f5" X-Cache: RefreshHit from cloudfront Via: 1.1 e922f68baf39b36844fe5c5e357acbc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: 0-lNJDPeFGjfV6nIy7VRArNfL4YYqnOYuHilVoRCWJPMN37Aoozjxw==
2024-12-11 13:17:04 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 Data Ascii: @charset "UTF-8";.c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframe
2024-12-11 13:17:04 UTC	13655	IN	Data Raw: 6d 6f 6e 74 68 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 29 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 74 65 78 74 2d 2d 69 6e 2d 72 61 6e 67 65 3a 6e 6f 74 28 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d Data Ascii: month-text--in-selecting-range,.react-datepicker__quarter-text--in-selecting-range,.react-datepicker__year-text--in-selecting-range),.react-datepicker__month--selecting-range .react-datepicker__year-text--in-range:not(.react-datepicker__day--in-selecting-

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:04 UTC	542	OUT	GET /widgetBase/bootstrap.js HTTP/1.1 Host: widget.freshworks.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.droplet.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:05 UTC	541	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9190 Connection: close Date: Wed, 11 Dec 2024 13:17:05 GMT Cache-Control: max-age=900 Last-Modified: Mon, 02 Dec 2024 09:00:57 GMT x-amz-version-id: O1GAQMz_k6pUMANy0iTwH8U0s2oVxHZi ETag: "9747340d2945bce636b4e6538c1ef8d8" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 53f7f921dde38b550ad3de5c10255716.cloudfront.net (CloudFront) X-Amz-Cf-Pop: BAH52-C1 X-Amz-Cf-Id: 9Nvx8-kAqh9KTwZPTdXK4m15IonD_UCX0s_qQedoZJDV0CBE0KpKag==
2024-12-11 13:17:05 UTC	9190	IN	Data Raw: 76 61 72 20 46 77 42 6f 6f 74 73 74 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 73 29 7b 69 66 28 74 5b 73 5d 29 72 65 74 75 72 6e 20 74 5b 73 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 73 5d 3d 7b 69 3a 73 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 73 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 Data Ascii: var FwBootstrap=function(e){var t={};function n(s){if(t[s])return t[s].exports;var i=t[s]={i:s,l:!1,exports:{}};return e[s].call(i.exports,i,i.exports,n),i.l=!0,i.exports}return n.m=e,n.c=t,n.d=function(e,t,s){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerab

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:05 UTC	556	OUT	GET /forms-BFN4VJQF.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:06 UTC	537	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 30039 Connection: close Date: Wed, 11 Dec 2024 13:17:06 GMT Last-Modified: Mon, 09 Dec 2024 21:38:50 GMT ETag: "6ace48d49e8e54748a088d81b12a04f5" x-amz-server-side-encryption: AES256 x-amz-version-id: rbTP_ukntLaMrkphmz52oVVX0cK1Dep4 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a37b7d4c90b51d32448d759d6266b3aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: akH2z2uum4mfPF2QgjZajOhwu-qACs9KU3tLxcJa6-G7BgWl3IByqA==
2024-12-11 13:17:06 UTC	15847	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 Data Ascii: @charset "UTF-8";.c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframe
2024-12-11 13:17:06 UTC	1640	IN	Data Raw: 6e 67 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 29 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2d 2d 69 6e 2d 72 61 6e 67 65 3a 6e 6f 74 28 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d Data Ascii: nge,.react-datepicker__quarter-text--in-selecting-range,.react-datepicker__year-text--in-selecting-range),.react-datepicker__month--selecting-range .react-datepicker__month-text--in-range:not(.react-datepicker__day--in-selecting-range,.react-datepicker__m
2024-12-11 13:17:06 UTC	12552	IN	Data Raw: 2d 2d 69 6e 2d 72 61 6e 67 65 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 2d 69 6e 2d 72 61 6e 67 65 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 Data Ascii: --in-range:hover,.react-datepicker__quarter-text.react-datepicker__month--selected:hover,.react-datepicker__quarter-text.react-datepicker__month--in-range:hover,.react-datepicker__quarter-text.react-datepicker__quarter--selected:hover,.react-datepicker__q

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:05 UTC	555	OUT	GET /home-VAVDOAWV.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:06 UTC	546	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Last-Modified: Thu, 05 Dec 2024 15:44:19 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: sZFarmPs3.2abztniR3BkrJRgpSJiyVu Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Dec 2024 16:28:51 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" X-Cache: Hit from cloudfront Via: 1.1 929253488b9a08a69ca6fa33a6fabaee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: MDpVidTPr4fLpyZ7GpDerfJkcJJEmh16mZ_QMhsil8Z8pLmiop1IJg== Age: 74896
2024-12-11 13:17:06 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:05 UTC	559	OUT	GET /insights-Y7BDGJDW.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:06 UTC	541	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Last-Modified: Mon, 09 Dec 2024 21:38:58 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZRrHmdvdjPdR4FuUXj.1hquXw2_2ySo6 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Dec 2024 13:17:07 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" X-Cache: RefreshHit from cloudfront Via: 1.1 a3e2f19da08276cde03ad0c6828e954c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: f5WkAq9-I1PUQdN9FJkA-mqjNiAjSeqXkMORc_rCbEi3ZSl-N8dmGw==
2024-12-11 13:17:06 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:05 UTC	559	OUT	GET /internal-VCFHS4O3.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:06 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:07 GMT Last-Modified: Mon, 09 Dec 2024 21:38:58 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: T22m7FU2aywUXDpt8MrdznVp9j1zs2Q3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fc28a7b580c6676ba3b08d37c9079474.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: wANSxy7aAXlyjLm_q3aG0miOKM7pawKGGqAuhGv4IcqtYhUiLR8vNQ==
2024-12-11 13:17:06 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:05 UTC	556	OUT	GET /login-QZRIQHQI.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:06 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:07 GMT Last-Modified: Mon, 09 Dec 2024 21:39:00 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: vROa0I8ctEwSI724wWmTm8F_xTGVVxXk Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 53bffce6f9af5c7a9ea275c089b9b5e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: ohI_8VN-BYs3QqwHDtTfJbZeJYZn6AbyQ4rqgmZ7vv7IKXl2NkIlBQ==
2024-12-11 13:17:06 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:06 UTC	564	OUT	GET /myAssignments-X6YQC4BO.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:07 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:07 GMT Last-Modified: Mon, 09 Dec 2024 21:39:01 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: PdNrPVTBTTFBU23hYcOFS89_EBjSjTbJ Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 b15df7a96f142a8bf12c0e951a0ba488.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: dDe5xI4LWj4ZZ7Dj-tpL4CkM_1c8UyVWnVP84yFxBvCmtwt_LksNEA==
2024-12-11 13:17:07 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:07 UTC	564	OUT	GET /mySubmissions-DHIIB7WQ.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:08 UTC	535	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Date: Wed, 11 Dec 2024 13:17:09 GMT Last-Modified: Mon, 09 Dec 2024 21:39:01 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" x-amz-server-side-encryption: AES256 x-amz-version-id: AXoZHiKAnIKC2yh_J.1D5nH8YvVa8vPU Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 929253488b9a08a69ca6fa33a6fabaee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: 70gngySaE213FYavLzYar4PwTqMiLIrhh_yDA0o49V_XGADCnIBCqQ==
2024-12-11 13:17:08 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das

Timestamp	Bytes transferred	Direction	Data
2024-12-11 13:17:07 UTC	558	OUT	GET /packets-W7FZZP5M.css HTTP/1.1 Host: app.droplet.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://app.droplet.io/form/yBW3QN Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 13:17:08 UTC	541	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 820 Connection: close Last-Modified: Mon, 09 Dec 2024 21:39:01 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 1Ak6ObyD26ioqOwh6V4PNV.TIgVMPHF3 Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 11 Dec 2024 13:17:09 GMT ETag: "7c3472fd6c503c2b6dd9341fbbaaf1d1" X-Cache: RefreshHit from cloudfront Via: 1.1 c8098551ae54eccdb7f0cd74d766cbd8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MRS52-C1 X-Amz-Cf-Id: Lr3dGaWv1_uwzvhGNNAHFm1u0TVsb23mAq5fFW6rnS0jKcymoSlfHw==
2024-12-11 13:17:08 UTC	820	IN	Data Raw: 2e 63 7b 6d 61 78 2d 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 33 30 30 70 78 7d 2e 61 7b 61 6e 69 6d 61 74 69 6f 6e 3a 72 20 31 2e 34 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 7d 2e 70 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 35 30 70 78 2c 32 30 30 70 78 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 31 30 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 20 31 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 69 6e 66 69 6e 69 74 65 3b 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3a 72 6f 75 6e 64 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 7b 30 25 7b 73 74 72 6f 6b 65 2d 64 61 73 Data Ascii: .c{max-inline-size:300px}.a{animation:r 1.4s linear infinite;transform-origin:center center}.p{stroke-dasharray:150px,200px;stroke-dashoffset:-10;transform-origin:center;animation:o 1.4s ease-in-out infinite;stroke-linecap:round}@keyframes o{0%{stroke-das