Windows Analysis Report
https://laimilano.powerappsportals.com/

Overview

General Information

Sample URL:	https://laimilano.powerappsportals.com/
Analysis ID:	1579871
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Classification

Signatures

Phishing

AI detected phishing page

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The URL 'portalpowerfiles.top' does not match the legitimate domain for Microsoft., The domain 'portalpowerfiles.top' is suspicious as it does not relate to Microsoft and uses an unusual domain extension '.top'., The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites. DOM: 4.6.pages.csv
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'portalpowerfiles.top' does not match the legitimate domain 'microsoft.com'., The domain 'portalpowerfiles.top' is unusual and not commonly associated with Microsoft., The use of a generic top-level domain '.top' is suspicious for a well-known brand like Microsoft., The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites. DOM: 4.7.pages.csv

AI detected landing page (webpage, office document or email)

Source: https://laimilano.powerappsportals.com/

Joe Sandbox AI: Page contains button: 'VISUALIZZA I DOCUMENTI COMPLETATI' Source: '1.0.pages.csv'

AI detected suspicious Javascript

Source: 0.36.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portalpowerfiles.top/xezwd... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load an external script, along with the obfuscated nature of the script, further increases the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of potential malicious intent.
Source: 0.35.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portalpowerfiles.top/xezwd... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The script appears to be attempting to collect user credentials and execute additional code, which is highly suspicious and indicative of malicious intent.
Source: 0.38.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portalpowerfiles.top/xezwd/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscation of the script's purpose raise significant security concerns. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and poses a high risk of malicious activity.

HTML body contains low number of good links

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML body with high number of embedded images detected

HTTP Parser: Total embedded image size: 30653

HTML page contains hidden javascript code

Source: https://portalpowerfiles.top/xezwd

HTTP Parser: Base64 decoded: 1734956481.000000

HTML title does not match URL

HTTP Parser: Title: Verify your login does not match URL

Invalid 'forgot password' link found

HTTP Parser: Invalid link: Forgot password?

Invalid T&C link found

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: Invalid link: Terms of use
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: Invalid link: Privacy & cookies
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: Invalid link: Terms of use
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: Invalid link: Privacy & cookies

HTTP Parser: <input type="password" .../> found

Source: https://laimilano.powerappsportals.com/	HTTP Parser: No favicon
Source: https://portalpowerfiles.top/xezwd	HTTP Parser: No favicon
Source: https://portalpowerfiles.top/xezwd/	HTTP Parser: No favicon

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: No <meta name="author".. found
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: No <meta name="author".. found

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: No <meta name="copyright".. found
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /png-clipart/20220612/original/pngtree-pdf-file-icon-png-png-image_7965915.png HTTP/1.1Host: png.pngtree.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb497.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.bundle-66ccebb849.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/web.png HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-style.bundle-2659c6f064.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/close.png HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /png-clipart/20220612/original/pngtree-pdf-file-icon-png-png-image_7965915.png HTTP/1.1Host: png.pngtree.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VbzItM7MKUVzm3_nsZTZ69.Njs0qgT6hLDrE2goslw8-1734956465-1.0.1.1-v8t4ayCL8yaibW4rl8oBBTRGxQxa9KhSknlEnMgzeHM7fnVU0_VGami.t0kU2Lb.wAIdMxQ0HGiIMXoEG.gMeA
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/close.png HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/web.png HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry.bundle-c71b2e2d47.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf.bundle-9183da3d63.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry.bundle-c71b2e2d47.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/app.BootstrapV5.bundle-5e253b544f.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf.bundle-9183da3d63.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/main.38f3cbbbdc.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/448.462407f435.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/469.bc70744318.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/867.0578a1c628.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/main.38f3cbbbdc.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/app.BootstrapV5.bundle-5e253b544f.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/243.37970f022e.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/573.676281aef2.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/448.462407f435.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/90.24327273f1.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/841.8a5182f1f0.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/867.0578a1c628.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/469.bc70744318.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/243.37970f022e.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/90.24327273f1.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/573.676281aef2.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/841.8a5182f1f0.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_loader/manifest-0.0.30.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_controls/manifest-3.3.2.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/manifest-0.2.10.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/manifest-0.5.0.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/data_grid/manifest-1.1.31.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.33.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xezwd HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/manifest-0.5.0.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/data_grid/manifest-1.1.31.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/manifest-0.2.10.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_loader/manifest-0.0.30.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.33.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_controls/manifest-3.3.2.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xezwd HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://portalpowerfiles.top/xezwdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA
Source: global traffic	HTTP traffic detected: GET /xezwd/ HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s
Source: global traffic	HTTP traffic detected: GET /xezwd/ HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://portalpowerfiles.top/xezwd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s
Source: global traffic	HTTP traffic detected: GET /xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/index HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://portalpowerfiles.top/xezwd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8f684fd4ceff42df HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/styles/app.css HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portalpowerfiles.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/back.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/logo.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/info.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/appnotif2.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/logo.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/back.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_app.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_code.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_sms.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/info.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/appnotif2.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_app.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_code.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_sms.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: laimilano.powerappsportals.com
Source: global traffic	DNS traffic detected: DNS query: content.powerapps.com
Source: global traffic	DNS traffic detected: DNS query: png.pngtree.com
Source: global traffic	DNS traffic detected: DNS query: portalpowerfiles.top
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net

Source: unknown

HTTP traffic detected: POST /xezwd HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveContent-Length: 22sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"2jNvivFddW37htfFz0RIL5Aq2D0: 42363246X-Requested-TimeStamp-Expire: sec-ch-ua-mobile: ?0X-Requested-TimeStamp-Combination: X-Requested-Type-Combination: GETContent-type: application/x-www-form-urlencodedX-Requested-Type: GETUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-with: XMLHttpRequestX-Requested-TimeStamp: sec-ch-ua-platform: "Windows"Accept: */*Origin: https://portalpowerfiles.topSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://portalpowerfiles.top/xezwdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA

Source: chromecache_185.2.dr, chromecache_142.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_184.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_170.2.dr, chromecache_124.2.dr, chromecache_163.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_170.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://malsup.com/jquery/form/
Source: chromecache_124.2.dr, chromecache_163.2.dr	String found in binary or memory: http://medialize.github.io/URI.js
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://timeago.yarp.com/
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.coolite.com/
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.coolite.com/).
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.datejs.com/
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.datejs.com/license/.
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceObserver/PerformanceObserver
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming
Source: chromecache_186.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_117.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_117.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_132.2.dr, chromecache_164.2.dr, chromecache_178.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_124.2.dr, chromecache_163.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker
Source: chromecache_170.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker/
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/Microsoft/ApplicationInsights-JS#example-setting-cloud-role-name
Source: chromecache_154.2.dr, chromecache_143.2.dr	String found in binary or memory: https://github.com/gjunge/rateit.js
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: https://github.com/malsup/form
Source: chromecache_132.2.dr, chromecache_164.2.dr, chromecache_178.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_184.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_132.2.dr, chromecache_178.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_153.2.dr, chromecache_149.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_153.2.dr, chromecache_149.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_153.2.dr, chromecache_149.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_153.2.dr, chromecache_149.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_124.2.dr, chromecache_163.2.dr	String found in binary or memory: https://underscorejs.org

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal56.phis.win@17/148@30/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2272,i,10880344811088556588,10724681239299619440,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://laimilano.powerappsportals.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2272,i,10880344811088556588,10724681239299619440,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_109.2.dr, chromecache_146.2.dr, chromecache_153.2.dr, chromecache_116.2.dr, chromecache_149.2.dr, chromecache_186.2.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_109.2.dr, chromecache_146.2.dr, chromecache_153.2.dr, chromecache_116.2.dr, chromecache_149.2.dr, chromecache_186.2.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.3.157	png.pngtree.com	United States	13335	CLOUDFLARENETUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.22.164	portalpowerfiles.top	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.4

Contacted Domains

Name	IP	Active
a.nel.cloudflare.com	35.190.80.1	true
png.pngtree.com	104.18.3.157	true
code.jquery.com	151.101.130.137	true
portalpowerfiles.top	104.21.22.164	true
www.google.com	172.217.21.36	true
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true
laimilano.powerappsportals.com	unknown	unknown
cdn.jsdelivr.net	unknown	unknown
content.powerapps.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://content.powerapps.com/resource/powerappsportal/img/close.png	false	high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js	false	high
https://content.powerapps.com/resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/867.0578a1c628.chunk.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/90.24327273f1.chunk.js	false	high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-style.bundle-2659c6f064.css	false	high
https://content.powerapps.com/resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css	false	high
https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.bundle-66ccebb849.css	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/main.38f3cbbbdc.chunk.js	false	high
https://code.jquery.com/jquery-3.6.0.min.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/data_grid/manifest-1.1.31.json	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js	false	high
https://portalpowerfiles.top/xezwd/page/images/verify_code.png	false	unknown
https://content.powerapps.com/resource/powerappsportal/controls/host/448.462407f435.chunk.js	false	high
https://png.pngtree.com/png-clipart/20220612/original/pngtree-pdf-file-icon-png-png-image_7965915.png	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/469.bc70744318.chunk.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/pcf_controls/manifest-3.3.2.json	false	high
https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	true	unknown
https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/index	false	unknown
https://portalpowerfiles.top/xezwd	true	unknown
https://portalpowerfiles.top/xezwd/page/images/logo.png	false	unknown
https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/841.8a5182f1f0.chunk.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/manifest-0.5.0.json	false	high
https://a.nel.cloudflare.com/report/v4?s=Ily1n0RRa1ZdQvNcbgWfasnvAqntPSxzhwf%2B6LmR5rbmAXfc%2BzTZZct%2B3Skr7JiSNwe7eBcCCEFqRyysFjS6by1lQttUB3jd5hWYL1DuTayK5WsoLgfTXdyDAAMV%2BWqQg9Yx3L3Y4Q%3D%3D	false	high
https://portalpowerfiles.top/cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js?	false	unknown
https://content.powerapps.com/resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb497.css	false	high
https://portalpowerfiles.top/xezwd/page/images/verify_sms.png	false	unknown
https://content.powerapps.com/resource/powerappsportal/dist/app.BootstrapV5.bundle-5e253b544f.js	false	high
https://content.powerapps.com/resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js	false	high
https://portalpowerfiles.top/xezwd/page/images/verify_app.png	false	unknown
https://portalpowerfiles.top/xezwd/page/images/appnotif2.png	false	unknown
https://portalpowerfiles.top/xezwd/page/images/verify.png	false	unknown
https://portalpowerfiles.top/xezwd/	true	unknown
https://content.powerapps.com/resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.33.json	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js	false	high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/mf_shared/manifest-0.2.10.json	false	high
https://portalpowerfiles.top/xezwd/page/styles/app.css	false	unknown
https://portalpowerfiles.top/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false	unknown
https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry.bundle-c71b2e2d47.js	false	high
https://portalpowerfiles.top/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	unknown
https://laimilano.powerappsportals.com/	true	unknown
https://content.powerapps.com/resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/host/243.37970f022e.chunk.js	false	high
https://content.powerapps.com/resource/powerappsportal/controls/pcf_loader/manifest-0.0.30.json	false	high
https://content.powerapps.com/resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js	false	high
https://portalpowerfiles.top/cdn-cgi/challenge-platform/h/b/jsd/r/8f684fd4ceff42df	false	unknown
https://content.powerapps.com/resource/powerappsportal/controls/host/573.676281aef2.chunk.js	false	high
https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js	false	high
https://portalpowerfiles.top/xezwd/page/images/info.png	false	unknown
https://content.powerapps.com/resource/powerappsportal/img/web.png	false	high
https://portalpowerfiles.top/xezwd/page/images/back.png	false	unknown
https://content.powerapps.com/resource/powerappsportal/dist/pcf.bundle-9183da3d63.js	false	high

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 101	assembler source, ASCII text, with very long lines (496)	CDF90F3517EE6CA9B704681368DAF1CB	BECB98AE7A483339F6ACF03201A4B089CF4673F0	9C812D66179E70116FF42E7F6191883B0F0797EF797831C75B294F4684383248
Chrome Cache Entry: 102	JSON data	320C8BE42A19CB9DF6A5011CC4E1BC6D	2EEC673BEFEAE800B601D970B4A0E4CA46FABA93	16201845D54E6F4B48E3CBBC60B835FD7B3D31284F4D1F63BD959EE4A09986F5
Chrome Cache Entry: 103	PNG image data, 61 x 73, 8-bit/color RGBA, non-interlaced	F69BD1A8C5D18C08C140445DC8DBC7E2	ED7CBF47983BD9B39D188A531C350C3B3D05DB0E	C6E325A690B4378B2C1E25F604A4E1F197910F75B55218A495FACFF076ADF97B
Chrome Cache Entry: 104	ASCII text, with no line terminators	3E3A9DBE5828D868CF824DB636665521	96E9874716E098DDAEAFE1A30A3AD201085B1A28	F9A7BA5B9CEFD0301A4367E653D5EFBE8F6913977C6CB137811D554CE936E941
Chrome Cache Entry: 105	ASCII text, with very long lines (48395)	6027D51DC3F9461C3B5AB3A1F8C5BEED	9787028F6B186F85580729694A1ED66DAE58B5F5	C108037861ED8A7BD3CD188CC6DA3F7DC4103207B2C77B7E439F33DFA9334309
Chrome Cache Entry: 106	ASCII text, with very long lines (11766), with no line terminators	2659C6F064BBDF38AFF3A3F7D33BA256	73EA787E226F755D9F57DC637AEB5A9D506338CF	E3A5A5E3432453A9CDCE2A02DD4D7F08037119C6A9AC545D010D3CF73768825A
Chrome Cache Entry: 107	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	633E70F51B5C0319AF3ACF16EC1AE7B6	D28238721914C98998ACC0485CCEBF230F01A520	FB076F7948CA70EB1F51334FE4C473C40BBE3BCEB105981C482BB8634FF98081
Chrome Cache Entry: 108	ASCII text, with very long lines (61300)	11A5A914937B75288F59799624B22C41	FA1304A3AAE266ECEEA76FF1BED1D2894DAF19F2	0D123D26B7574F73FADFC2B904E098C4977CAFFFBA55A94F547ED5B23EBC4169
Chrome Cache Entry: 109	ASCII text, with very long lines (39862)	E303D5355313048BECBD7E9429825F82	4ECFDB3DCA8F4AD156D0A0F12FB2ABBB1DBF6D67	CED5EA5C04E6DD8807FA46B2052888EB4798E557C507FC2EC75463FEE17A9AEA
Chrome Cache Entry: 110	PNG image data, 51 x 42, 8-bit/color RGBA, non-interlaced	E198D3D3F75FF270E4DE1C36E0BF4A8A	C9B68D5472B2B32B46CB0922CEC0FEA76ABB1DC3	029B50BBBC9BCE1593AE21671033736AE44111EE275E346B6316AE508DD61685
Chrome Cache Entry: 111	PNG image data, 50 x 58, 8-bit/color RGBA, non-interlaced	804F72421862425A01D9697F9F36C9A2	B73DF25467E364FB229E7715E5393B5931491977	112D2EAC21572A13C7DC55466DDD3091E28829611716C911714C05D183CFC56C
Chrome Cache Entry: 112	PNG image data, 50 x 58, 8-bit/color RGBA, non-interlaced	804F72421862425A01D9697F9F36C9A2	B73DF25467E364FB229E7715E5393B5931491977	112D2EAC21572A13C7DC55466DDD3091E28829611716C911714C05D183CFC56C
Chrome Cache Entry: 113	ASCII text, with very long lines (65447)	8FB8FEE4FCC3CC86FF6C724154C49C42	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
Chrome Cache Entry: 114	ASCII text, with very long lines (48395)	6027D51DC3F9461C3B5AB3A1F8C5BEED	9787028F6B186F85580729694A1ED66DAE58B5F5	C108037861ED8A7BD3CD188CC6DA3F7DC4103207B2C77B7E439F33DFA9334309
Chrome Cache Entry: 115	PNG image data, 61 x 73, 8-bit/color RGBA, non-interlaced	F69BD1A8C5D18C08C140445DC8DBC7E2	ED7CBF47983BD9B39D188A531C350C3B3D05DB0E	C6E325A690B4378B2C1E25F604A4E1F197910F75B55218A495FACFF076ADF97B
Chrome Cache Entry: 116	ASCII text, with very long lines (28287)	9183DA3D63ADCBCA9C451BB60E6E1F10	9207557A291A137EF495DCEF25900E1E5D6F33AA	66AA8F2E328C6461928C45E81A225A7C857185A6A27119BEBFD3F3C321AD555C
Chrome Cache Entry: 117	ASCII text, with very long lines (65312), with CRLF line terminators	2CE6EFB497D50E0FBD335FF651D0E961	4A644F008F5535E2B15DE5A72ACD498C2D5C59C8	37AD3F3C0DB53E8E6D68199A6DF828E7DB31ABE1DE721CB7475A840A6C10C215
Chrome Cache Entry: 118	ASCII text, with very long lines (1835)	DFD19253D3DBC5521540512B5B2B05FB	63C7C12B96231EA61F6DF2DAFAF53FEBB20D627D	810C0D1DE636403CE04DD194F9230C998613BA37D1496463648055B44E2B95F6
Chrome Cache Entry: 119	ASCII text, with very long lines (2804)	0CB699A5581C3F985C95D7622A448B27	22E6428F3893AB5F272C4A4D7C694CC0F9C67E20	D156C15C56A07666D0DE4E518C4960DA11648012D8B0ADB6AD0D549A45594E30
Chrome Cache Entry: 120	JSON data	62B893DEA5776FBF742DFBD82C9E07C4	0B889337205F032D068BD742726178AE04CAB75B	BA1C0988F017C8F8F082FEC9805779E87F3FAAC4438F2132649E3B9E7932828B
Chrome Cache Entry: 121	JSON data	A0D01046CF6C59450C9379B2FC386E9F	D11CA23D0432A0E9625F2CD6C18574660FE4D5C6	31C68BC283A3829BCA75EB76E24E5EB38DD1DA242E3B5E31D5DF22384B988EC6
Chrome Cache Entry: 122	ASCII text, with very long lines (383)	25DFE0A5F08DAE66177D60C599904208	6888D55C9D52DF74703862C1274459D1BFCDFC69	A3765EC0AC346488AE0E3BED0E98F5744AC56C19BBD371073195ADF8AE2F77A9
Chrome Cache Entry: 123	ASCII text, with very long lines (42815)	197395E90DC9729F818EA9939E9C0F02	44AB2D06F60067EDD19EDFC7150C4D8FF144BEB2	E82600ABB85B8F5E55BC120B8FBA82ACD57C533C97FD6B843AD31FC75A255F56
Chrome Cache Entry: 124	Unicode text, UTF-8 text, with very long lines (65445)	CF8E0FD9421E12CFB59F0266E0273F7D	62EF88B36C4A8C0475E10DFD80A4F7E588AA1F15	522C2E27DB64974813E59251D101596A7692A9B964771A9CE3F1978247862258
Chrome Cache Entry: 125	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced	847C6DADE877E0BE3C2DFFAFB6F99793	A726E4B36CF3B51DD4F14F444ABF4FF7652713CA	559F84697E51405E0E22202B923A2C76412826A6A3EF179344B23ADAE8306142
Chrome Cache Entry: 126	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced	333EE830E5AB72C41DD9126A27B4D878	12D8D66EBB3076F3D6069E133C3212F97C8774E1	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
Chrome Cache Entry: 127	PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced	333EE830E5AB72C41DD9126A27B4D878	12D8D66EBB3076F3D6069E133C3212F97C8774E1	8702292CBC365E9F0488143E2B309B85EFE09C61FD2E0A2E21C53735A309313C
Chrome Cache Entry: 128	PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced	74710B068526106916E5A9AE5B70FA64	2E7344458A5EB6EFB65976EE144BBEDBA680B5AC	55B9B171BB9BC15ACDD21C7A186E1268BC774B6A7C5A6FBC2F2BFEE564890325
Chrome Cache Entry: 129	PNG image data, 51 x 42, 8-bit/color RGBA, non-interlaced	E198D3D3F75FF270E4DE1C36E0BF4A8A	C9B68D5472B2B32B46CB0922CEC0FEA76ABB1DC3	029B50BBBC9BCE1593AE21671033736AE44111EE275E346B6316AE508DD61685
Chrome Cache Entry: 130	JSON data	62B893DEA5776FBF742DFBD82C9E07C4	0B889337205F032D068BD742726178AE04CAB75B	BA1C0988F017C8F8F082FEC9805779E87F3FAAC4438F2132649E3B9E7932828B
Chrome Cache Entry: 131	Unicode text, UTF-8 text, with CRLF line terminators	3030AEDCB4F044B0CC4A2E3B6DF00259	C74BAC96C68691D53E781054B0F83A4581F16E95	408F15E5BC6FF761D8AB50C8D3D318E4F9EB16A3E99E576EBC688CB4FC411634
Chrome Cache Entry: 132	ASCII text, with very long lines (65294), with CRLF line terminators	BE8391E97DEA755C86C38DB4E43773D8	3E573E059A8C52A1B7063895562F6A23261F54A0	BBB5F1A1DF8E94BE934B438B99E27173F2EC270005C7ABE07204BFE0DD64B134
Chrome Cache Entry: 133	JSON data	76191F8F88F328FEA852F2C59A69DE2A	71CD2F222A9F9A422D9C3EF35A4EA00A806C1014	106AEF5C5EF0E27ED22CC4942C97DBB2BD76833E6DF7B5E93A3BCBF67039FAB3
Chrome Cache Entry: 134	C++ source, ASCII text, with very long lines (8608)	347DBEDBD1ED2F2BC3265479A7B4F36F	961E9DBCFF5472B207FF02075DCE05B0D711FA7A	C5C379A423417F325CE72E5002E3055215F2E298F87C4C94292B735141A16010
Chrome Cache Entry: 135	JSON data	A0D01046CF6C59450C9379B2FC386E9F	D11CA23D0432A0E9625F2CD6C18574660FE4D5C6	31C68BC283A3829BCA75EB76E24E5EB38DD1DA242E3B5E31D5DF22384B988EC6
Chrome Cache Entry: 136	ASCII text, with no line terminators	F4A0E619B855697F4DB1A1B22FE37E8C	3D1CA30185839E05C6D876C7E8477604BFAC6CDA	CEC86F53B19C31BC124614007553A6EBC5434F9B1D2F03B1DB0393B22AB16EA2
Chrome Cache Entry: 137	C++ source, ASCII text, with very long lines (8608)	347DBEDBD1ED2F2BC3265479A7B4F36F	961E9DBCFF5472B207FF02075DCE05B0D711FA7A	C5C379A423417F325CE72E5002E3055215F2E298F87C4C94292B735141A16010
Chrome Cache Entry: 138	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced	547988BAC5584B4608466D761E16F370	C11BB71049702528402A31027F200184910A7E23	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
Chrome Cache Entry: 139	ASCII text, with very long lines (8422)	202B38276DB16E151E3875F0BD143E65	9E9ADB227EF28E4988A2FDDA10E8C4721D7505B5	56751F03A556E9C29A3FDB26D53232698999EAC1DF96518BFC421E4BE86FF8C8
Chrome Cache Entry: 140	ASCII text, with very long lines (65393), with CRLF line terminators	C71B2E2D47936D1A3DD98E7624EE4C7A	A55E77CB3590BEE5D5F1C30E8718D2B4486CF491	33CE7E4A543FDBCDD8AB36C934E4B8DAA99C976D3468282C2C8846F06419F096
Chrome Cache Entry: 141	ASCII text, with very long lines (8735), with no line terminators	E9F693AB9792D0C9D59380371AF9D17D	D923F00E8D0A6658FB2854880CBDC128B8B196C2	81FF28504E4CAE20006BA8F41A7BD3D1C447939B468156679428782C7F029979
Chrome Cache Entry: 142	ASCII text, with very long lines (25293)	805A1661B77834F61B0C8E1175DC9F90	38E8EEB48DF5906F796E4C9A4549DFBF0327D656	B37275F7C7F76430F05A20E7D0DDDAC3649467DBC0E7AF58CC3F04B1EE6DEA81
Chrome Cache Entry: 143	ASCII text, with very long lines (65536), with no line terminators	5E253B544FC4EB3F88AD59062377E71C	7905A8CC47EBA9F3C40CCCB951D0D8E36417F606	159EA4C96CC8A6893838C64CD0C70775DCECD6E1E7F2D6FD3CAE7914D6267727
Chrome Cache Entry: 144	PNG image data, 49 x 63, 8-bit/color RGBA, non-interlaced	3AFF8064BB4CA017473290B5E3B9F949	D3F110D0C60CD21D3F7A2725157FC419F5B9DD99	153A445447F6DC712D29916BE3B172055729D7E132B5E75041C34BCF4AF19951
Chrome Cache Entry: 145	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced	847C6DADE877E0BE3C2DFFAFB6F99793	A726E4B36CF3B51DD4F14F444ABF4FF7652713CA	559F84697E51405E0E22202B923A2C76412826A6A3EF179344B23ADAE8306142
Chrome Cache Entry: 146	ASCII text, with very long lines (39862)	E303D5355313048BECBD7E9429825F82	4ECFDB3DCA8F4AD156D0A0F12FB2ABBB1DBF6D67	CED5EA5C04E6DD8807FA46B2052888EB4798E557C507FC2EC75463FEE17A9AEA
Chrome Cache Entry: 147	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced	547988BAC5584B4608466D761E16F370	C11BB71049702528402A31027F200184910A7E23	70E32B2DB3F079BB0295A85A0DB15ED9E5926294DD947938D6CFA595F5AB18B4
Chrome Cache Entry: 148	ASCII text, with very long lines (65393), with CRLF line terminators	C71B2E2D47936D1A3DD98E7624EE4C7A	A55E77CB3590BEE5D5F1C30E8718D2B4486CF491	33CE7E4A543FDBCDD8AB36C934E4B8DAA99C976D3468282C2C8846F06419F096
Chrome Cache Entry: 149	Unicode text, UTF-8 text, with very long lines (61934), with no line terminators	4D0031BC8253F908DEE9E7E390E0A781	4D4423E16935874FABAF0172394BD1236AE6961D	BE1CE15C8FEA18D00704AE43377BF97853551BFDE3F9BA8860DE1CDB3CBC394B
Chrome Cache Entry: 150	ASCII text, with very long lines (540), with no line terminators	2739C60227F87D19F5C784BFFB5991F8	42DBAC51553D7778A176E710D3CE1009884DE167	974FECBEBCF2F295348C3631FE069966EAB4B4B57CD4FCBE15FB70D0ACAB47C6
Chrome Cache Entry: 151	PNG image data, 263 x 31, 8-bit/color RGBA, non-interlaced	EF984B9CE53801ADAE1FAE29B5A5792F	653DE3EACDAA9B38634892A021FF63CC46D84C2E	C2B2CA401F18B83BB197CED34FB80BAE4A3E3E2259F86CE4946EFE36BB7ACADF
Chrome Cache Entry: 152	ASCII text, with very long lines (64184)	76D43A9405CE1A4618FF0A86BECBA682	556ACEAE8396531440488D48302636CB02288CBC	D636393DA268FA543FC3F05A5405E53E26BF4101EA929ECCD401707B5A6C75B4
Chrome Cache Entry: 153	Unicode text, UTF-8 text, with very long lines (61934), with no line terminators	4D0031BC8253F908DEE9E7E390E0A781	4D4423E16935874FABAF0172394BD1236AE6961D	BE1CE15C8FEA18D00704AE43377BF97853551BFDE3F9BA8860DE1CDB3CBC394B
Chrome Cache Entry: 154	ASCII text, with very long lines (65536), with no line terminators	5E253B544FC4EB3F88AD59062377E71C	7905A8CC47EBA9F3C40CCCB951D0D8E36417F606	159EA4C96CC8A6893838C64CD0C70775DCECD6E1E7F2D6FD3CAE7914D6267727
Chrome Cache Entry: 155	PNG image data, 49 x 63, 8-bit/color RGBA, non-interlaced	3AFF8064BB4CA017473290B5E3B9F949	D3F110D0C60CD21D3F7A2725157FC419F5B9DD99	153A445447F6DC712D29916BE3B172055729D7E132B5E75041C34BCF4AF19951
Chrome Cache Entry: 156	ASCII text, with very long lines (394), with CRLF line terminators	16F567F549BA7B4EAF0559BD527323FA	77E458F5FB123247C0104F72655F07D2CE94DC5B	7C515050A8D0D8CF2D3E17528FE0BFCC5FABC6F766C4069044F214AEE3D7A047
Chrome Cache Entry: 157	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 158	ASCII text, with very long lines (361), with no line terminators	EDA4E638FDD1B8DE8F97EC781E8242D6	A8C0716A4BCCF2805899403AF14E7B9216B19573	5423F185195F046D0F3893F674E072BE43E47C6124DD6CCBE214E896B1944D43
Chrome Cache Entry: 159	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	633E70F51B5C0319AF3ACF16EC1AE7B6	D28238721914C98998ACC0485CCEBF230F01A520	FB076F7948CA70EB1F51334FE4C473C40BBE3BCEB105981C482BB8634FF98081
Chrome Cache Entry: 160	ASCII text, with very long lines (1835)	DFD19253D3DBC5521540512B5B2B05FB	63C7C12B96231EA61F6DF2DAFAF53FEBB20D627D	810C0D1DE636403CE04DD194F9230C998613BA37D1496463648055B44E2B95F6
Chrome Cache Entry: 161	HTML document, ASCII text, with very long lines (1238)	9E8F56E8E1806253BA01A95CFC3D392C	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
Chrome Cache Entry: 162	PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced	74710B068526106916E5A9AE5B70FA64	2E7344458A5EB6EFB65976EE144BBEDBA680B5AC	55B9B171BB9BC15ACDD21C7A186E1268BC774B6A7C5A6FBC2F2BFEE564890325
Chrome Cache Entry: 163	Unicode text, UTF-8 text, with very long lines (65445)	CF8E0FD9421E12CFB59F0266E0273F7D	62EF88B36C4A8C0475E10DFD80A4F7E588AA1F15	522C2E27DB64974813E59251D101596A7692A9B964771A9CE3F1978247862258
Chrome Cache Entry: 164	Unicode text, UTF-8 text, with very long lines (65300), with CRLF line terminators	30EAFD8EF153814B788EB71DB3F1B99C	3C7BD538F6307CAE3DE00D64BD2B742B9E4AFE3B	7FCFD614F45FE132CC914BEEAC10592711BF2760E3732D85DFAFEB4022A3C914
Chrome Cache Entry: 165	JSON data	C7F97B0028247F8315099FBBA028BD70	BDF9B0FB42CA9867F4E1B18E9595931179B5F287	3682335E4C5BD40A4E12B434E97B5848DC880AF08DAA3FDEEE4EF906770E8802
Chrome Cache Entry: 166	ASCII text, with very long lines (64184)	76D43A9405CE1A4618FF0A86BECBA682	556ACEAE8396531440488D48302636CB02288CBC	D636393DA268FA543FC3F05A5405E53E26BF4101EA929ECCD401707B5A6C75B4
Chrome Cache Entry: 167	ASCII text, with very long lines (6203)	F1ACFD2815BECD7DF8E02C415B9973F7	3CF9577A5B4CBA69C9646967B8855F7A2F137F80	99A2179570F5B6A4388F0175165C32018D8078E6F97F1591CF3426538361B4D7
Chrome Cache Entry: 168	ASCII text, with very long lines (6203)	F1ACFD2815BECD7DF8E02C415B9973F7	3CF9577A5B4CBA69C9646967B8855F7A2F137F80	99A2179570F5B6A4388F0175165C32018D8078E6F97F1591CF3426538361B4D7
Chrome Cache Entry: 169	PNG image data, 52 x 40, 8-bit/color RGBA, non-interlaced	8244AF7FE59CC67A3B69CD98F19862C6	C0D505C27802EBC71C5D551A55D56A78138EA3A7	F8917DA114B5593AFD3C934A2A588DB7191D6E645833B6809D81DE64722CD21A
Chrome Cache Entry: 170	ASCII text, with very long lines (64632), with CRLF line terminators	66CCEBB8498E5E44E10BF7159A826FB5	DFE63049222FC67A77A1175962B69774DEDDC57D	011323F23F9772F6C3DB6F3A1C0241EDB281673380133702A6A29E976B110554
Chrome Cache Entry: 171	PNG image data, 52 x 40, 8-bit/color RGBA, non-interlaced	8244AF7FE59CC67A3B69CD98F19862C6	C0D505C27802EBC71C5D551A55D56A78138EA3A7	F8917DA114B5593AFD3C934A2A588DB7191D6E645833B6809D81DE64722CD21A
Chrome Cache Entry: 172	ASCII text, with very long lines (8422)	202B38276DB16E151E3875F0BD143E65	9E9ADB227EF28E4988A2FDDA10E8C4721D7505B5	56751F03A556E9C29A3FDB26D53232698999EAC1DF96518BFC421E4BE86FF8C8
Chrome Cache Entry: 173	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	1CCFEA34F655127024E56A9182D069B2	F01C37FC36D6F283021BFE2021F884756ACC0830	DDEB1C61FE3FC1C4195D6AF3CA1514F8EB78DE09E6DE3DBFCC960DDFDA93EE54
Chrome Cache Entry: 174	ASCII text, with very long lines (8727), with no line terminators	97A475D4470B3766138FBA26D6975803	8DE00B74D086D816E66E8BF3DF6354CAD7BE9E1F	946AEB679E80CC6EBF8A433269395741AA6D71ECE6F6B47E91AD0EC88FC00E18
Chrome Cache Entry: 175	JSON data	C8B14C025F59EAFD877EF1F901BE827E	695C050444CD8F41418483A2E375B3D11BAF097E	9EAEB8E78886FDC84FD0BEA265A83965A543BBFCA69EF2B9879A3FCEF006ADF3
Chrome Cache Entry: 176	Unicode text, UTF-8 text, with CRLF line terminators	3030AEDCB4F044B0CC4A2E3B6DF00259	C74BAC96C68691D53E781054B0F83A4581F16E95	408F15E5BC6FF761D8AB50C8D3D318E4F9EB16A3E99E576EBC688CB4FC411634
Chrome Cache Entry: 177	ASCII text, with very long lines (361), with no line terminators	EDA4E638FDD1B8DE8F97EC781E8242D6	A8C0716A4BCCF2805899403AF14E7B9216B19573	5423F185195F046D0F3893F674E072BE43E47C6124DD6CCBE214E896B1944D43
Chrome Cache Entry: 178	ASCII text, with very long lines (65294), with CRLF line terminators	BE8391E97DEA755C86C38DB4E43773D8	3E573E059A8C52A1B7063895562F6A23261F54A0	BBB5F1A1DF8E94BE934B438B99E27173F2EC270005C7ABE07204BFE0DD64B134
Chrome Cache Entry: 179	JSON data	C7F97B0028247F8315099FBBA028BD70	BDF9B0FB42CA9867F4E1B18E9595931179B5F287	3682335E4C5BD40A4E12B434E97B5848DC880AF08DAA3FDEEE4EF906770E8802
Chrome Cache Entry: 180	ASCII text, with very long lines (2804)	0CB699A5581C3F985C95D7622A448B27	22E6428F3893AB5F272C4A4D7C694CC0F9C67E20	D156C15C56A07666D0DE4E518C4960DA11648012D8B0ADB6AD0D549A45594E30
Chrome Cache Entry: 181	ASCII text, with no line terminators	F4A0E619B855697F4DB1A1B22FE37E8C	3D1CA30185839E05C6D876C7E8477604BFAC6CDA	CEC86F53B19C31BC124614007553A6EBC5434F9B1D2F03B1DB0393B22AB16EA2
Chrome Cache Entry: 182	ASCII text, with very long lines (54049)	110C02AABA6D184B61982072646CAF33	5FB13C49228FD1A7597A4DE2AB57AE6F68233856	A2EB7527F1135BFE4F7B429303B3350C680FEAA326EB307737EB2A90B7AA84B3
Chrome Cache Entry: 183	PNG image data, 263 x 31, 8-bit/color RGBA, non-interlaced	EF984B9CE53801ADAE1FAE29B5A5792F	653DE3EACDAA9B38634892A021FF63CC46D84C2E	C2B2CA401F18B83BB197CED34FB80BAE4A3E3E2259F86CE4946EFE36BB7ACADF
Chrome Cache Entry: 184	assembler source, ASCII text, with CRLF line terminators	FA694BC0473766A8E8F1CDEFB9007BBB	7F69530F8431FA456B9C0C02B65E7C2E197A98C2	AB189E68B67A70C8B40043A6734C512439214A072F5F90C69860A5BA42E71880
Chrome Cache Entry: 185	ASCII text, with very long lines (25293)	805A1661B77834F61B0C8E1175DC9F90	38E8EEB48DF5906F796E4C9A4549DFBF0327D656	B37275F7C7F76430F05A20E7D0DDDAC3649467DBC0E7AF58CC3F04B1EE6DEA81
Chrome Cache Entry: 186	ASCII text, with very long lines (28287)	9183DA3D63ADCBCA9C451BB60E6E1F10	9207557A291A137EF495DCEF25900E1E5D6F33AA	66AA8F2E328C6461928C45E81A225A7C857185A6A27119BEBFD3F3C321AD555C
Chrome Cache Entry: 187	ASCII text, with very long lines (383)	25DFE0A5F08DAE66177D60C599904208	6888D55C9D52DF74703862C1274459D1BFCDFC69	A3765EC0AC346488AE0E3BED0E98F5744AC56C19BBD371073195ADF8AE2F77A9
Chrome Cache Entry: 188	ASCII text, with very long lines (61300)	11A5A914937B75288F59799624B22C41	FA1304A3AAE266ECEEA76FF1BED1D2894DAF19F2	0D123D26B7574F73FADFC2B904E098C4977CAFFFBA55A94F547ED5B23EBC4169
Chrome Cache Entry: 189	JSON data	76191F8F88F328FEA852F2C59A69DE2A	71CD2F222A9F9A422D9C3EF35A4EA00A806C1014	106AEF5C5EF0E27ED22CC4942C97DBB2BD76833E6DF7B5E93A3BCBF67039FAB3
Chrome Cache Entry: 190	ASCII text, with very long lines (54049)	110C02AABA6D184B61982072646CAF33	5FB13C49228FD1A7597A4DE2AB57AE6F68233856	A2EB7527F1135BFE4F7B429303B3350C680FEAA326EB307737EB2A90B7AA84B3
Chrome Cache Entry: 191	ASCII text, with very long lines (42815)	197395E90DC9729F818EA9939E9C0F02	44AB2D06F60067EDD19EDFC7150C4D8FF144BEB2	E82600ABB85B8F5E55BC120B8FBA82ACD57C533C97FD6B843AD31FC75A255F56
Chrome Cache Entry: 192	HTML document, ASCII text, with very long lines (1238)	9E8F56E8E1806253BA01A95CFC3D392C	A8AF90D7482E1E99D03DE6BF88FED2315C5DD728	2595496FE48DF6FCF9B1BC57C29A744C121EB4DD11566466BC13D2E52E6BBCC8
Chrome Cache Entry: 193	JSON data	320C8BE42A19CB9DF6A5011CC4E1BC6D	2EEC673BEFEAE800B601D970B4A0E4CA46FABA93	16201845D54E6F4B48E3CBBC60B835FD7B3D31284F4D1F63BD959EE4A09986F5
Chrome Cache Entry: 194	ASCII text, with very long lines (65447)	8FB8FEE4FCC3CC86FF6C724154C49C42	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
Chrome Cache Entry: 195	JSON data	C8B14C025F59EAFD877EF1F901BE827E	695C050444CD8F41418483A2E375B3D11BAF097E	9EAEB8E78886FDC84FD0BEA265A83965A543BBFCA69EF2B9879A3FCEF006ADF3
Chrome Cache Entry: 196	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced	1CCFEA34F655127024E56A9182D069B2	F01C37FC36D6F283021BFE2021F884756ACC0830	DDEB1C61FE3FC1C4195D6AF3CA1514F8EB78DE09E6DE3DBFCC960DDFDA93EE54

Phishing

AI detected phishing page

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The URL 'portalpowerfiles.top' does not match the legitimate domain for Microsoft., The domain 'portalpowerfiles.top' is suspicious as it does not relate to Microsoft and uses an unusual domain extension '.top'., The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites. DOM: 4.6.pages.csv
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'portalpowerfiles.top' does not match the legitimate domain 'microsoft.com'., The domain 'portalpowerfiles.top' is unusual and not commonly associated with Microsoft., The use of a generic top-level domain '.top' is suspicious for a well-known brand like Microsoft., The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites. DOM: 4.7.pages.csv

AI detected landing page (webpage, office document or email)

Source: https://laimilano.powerappsportals.com/

Joe Sandbox AI: Page contains button: 'VISUALIZZA I DOCUMENTI COMPLETATI' Source: '1.0.pages.csv'

AI detected suspicious Javascript

Source: 0.36.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portalpowerfiles.top/xezwd... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load an external script, along with the obfuscated nature of the script, further increases the risk. While the script may have a legitimate purpose, such as a challenge platform, the overall behavior is highly suspicious and indicative of potential malicious intent.
Source: 0.35.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portalpowerfiles.top/xezwd... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The script appears to be attempting to collect user credentials and execute additional code, which is highly suspicious and indicative of malicious intent.
Source: 0.38.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://portalpowerfiles.top/xezwd/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. The use of an iframe to load additional scripts and the obfuscation of the script's purpose raise significant security concerns. While the script may have a legitimate purpose, such as implementing a security challenge, the overall behavior is highly suspicious and poses a high risk of malicious activity.

HTML body contains low number of good links

HTTP Parser: Number of links: 0

HTML body contains password input but no form action

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML body with high number of embedded images detected

HTTP Parser: Total embedded image size: 30653

HTML page contains hidden javascript code

Source: https://portalpowerfiles.top/xezwd

HTTP Parser: Base64 decoded: 1734956481.000000

HTML title does not match URL

HTTP Parser: Title: Verify your login does not match URL

Invalid 'forgot password' link found

HTTP Parser: Invalid link: Forgot password?

Invalid T&C link found

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: Invalid link: Terms of use
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: Invalid link: Privacy & cookies
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: Invalid link: Terms of use
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: Invalid link: Privacy & cookies

HTTP Parser: <input type="password" .../> found

Source: https://laimilano.powerappsportals.com/	HTTP Parser: No favicon
Source: https://portalpowerfiles.top/xezwd	HTTP Parser: No favicon
Source: https://portalpowerfiles.top/xezwd/	HTTP Parser: No favicon

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: No <meta name="author".. found
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: No <meta name="author".. found

Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: No <meta name="copyright".. found
Source: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /png-clipart/20220612/original/pngtree-pdf-file-icon-png-png-image_7965915.png HTTP/1.1Host: png.pngtree.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb497.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.bundle-66ccebb849.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/web.png HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-style.bundle-2659c6f064.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/close.png HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /png-clipart/20220612/original/pngtree-pdf-file-icon-png-png-image_7965915.png HTTP/1.1Host: png.pngtree.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=VbzItM7MKUVzm3_nsZTZ69.Njs0qgT6hLDrE2goslw8-1734956465-1.0.1.1-v8t4ayCL8yaibW4rl8oBBTRGxQxa9KhSknlEnMgzeHM7fnVU0_VGami.t0kU2Lb.wAIdMxQ0HGiIMXoEG.gMeA
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/close.png HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/web.png HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry.bundle-c71b2e2d47.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf.bundle-9183da3d63.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry.bundle-c71b2e2d47.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/app.BootstrapV5.bundle-5e253b544f.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-cf8e0fd942.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf.bundle-9183da3d63.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/main.38f3cbbbdc.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/448.462407f435.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/469.bc70744318.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/867.0578a1c628.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/main.38f3cbbbdc.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/app.BootstrapV5.bundle-5e253b544f.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/243.37970f022e.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/874.d64d28bc67.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/573.676281aef2.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/170.c9e6b9a6e9.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/448.462407f435.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/90.24327273f1.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/841.8a5182f1f0.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/867.0578a1c628.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/469.bc70744318.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/243.37970f022e.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/90.24327273f1.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/573.676281aef2.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/841.8a5182f1f0.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_loader/manifest-0.0.30.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_controls/manifest-3.3.2.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/manifest-0.2.10.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/manifest-0.5.0.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/data_grid/manifest-1.1.31.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.33.json HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://laimilano.powerappsportals.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xezwd HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://laimilano.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/manifest-0.5.0.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/data_grid/manifest-1.1.31.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/mf_shared/manifest-0.2.10.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_loader/manifest-0.0.30.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/controls_fluent_v9/manifest-0.0.33.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/pcf_controls/manifest-3.3.2.json HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xezwd HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://portalpowerfiles.top/xezwdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA
Source: global traffic	HTTP traffic detected: GET /xezwd/ HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s
Source: global traffic	HTTP traffic detected: GET /xezwd/ HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://portalpowerfiles.top/xezwd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/787bc399e22f/main.js? HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s
Source: global traffic	HTTP traffic detected: GET /xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/index HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://portalpowerfiles.top/xezwd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/8f684fd4ceff42df HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verify HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/indexAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/styles/app.css HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portalpowerfiles.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/back.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/logo.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/info.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/appnotif2.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/logo.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/back.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_app.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_code.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_sms.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://portalpowerfiles.top/xezwd/Wrgo8yjIWTUp7EVGqlkYvKhROFo0rgoitAcuU9A3BnMsSG6LbJE8ozSxdfzpqHXBloQF2gfe7mm3XeYN65LCL6yXlDnMkBnV4m1FzoH0JPa3sPw79iRabahcUKf5Zv1IPOGuZw2dtvCNMC4j0pexcQ/verifyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97; cf_clearance=09mTJ_eKPUrvh3993fZS1xtbRzZrmjHRzNsFg.fxpQY-1734956491-1.2.1.1-.ftgVFRc0nbRjnnZ6f3FxntI6eAARAlkCfsiDDrOBBJ93PwDG.ZvD.SMoiRoDRubn0wvpP1A_jMSQQRtbqoxL1P9Lbw9VMqExTOBwT0LFpi3XuCKJEgckAwOQV_KU73.hLw2IkLDnZb.v8KrPggN.Ag6MuUjtPPjoNJBcPOHlnI4LxKCG4MCMz_um7hfVQisB781L5ro4zPG0rbCuCUl.93ggyO4lVytthEDJ58fIqNVaFxt2PkhhyfycpIed2mb8eZCbQ.KirgMVrx3fFx3gz_9ll33zdQr6LizTex6QMdWyiDql_6WBdsbLdtp9IM7ICnYPGVPPAta2u2c36uTPoUetw7G93GD2XllgWRors7J_EbLIQE.Lgc0.DGJErlq
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/info.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/appnotif2.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_app.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_code.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97
Source: global traffic	HTTP traffic detected: GET /xezwd/page/images/verify_sms.png HTTP/1.1Host: portalpowerfiles.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BpD94KfRjlp3ghM9CGAOyD-Jz70=XopOzZMR2FnujcLshU6Rh1ZJAKg; lopHvquk13c8tCzJMvWkLsKS_W8=1734956476; SFIfd2D85suBt-O67ZuBKIjuLaw=1735042876; 4chnI0TCjW0UAUYzAifxGymK6Yw=4X0TyZso04A0GVPlIOuPGfIlej8; DL1jFiP47DSnh2L3VPug-Fd-Ut0=24V5fd_SqGfynCsHmAJbl9ySndA; IVbyttb1ufVkBkF9NXy4SPFNZaQ=1734956480; ZD1__Ndn-nzsV4p-kROSTk1lQIw=1735042880; T-dp6LcXs25G_RIC1fUxZtXgHxQ=ZhKMF4lH0i6K6rOTYbANCY1j82s; PHPSESSID=45302606f668fddcdf2099acbe004e97

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: laimilano.powerappsportals.com
Source: global traffic	DNS traffic detected: DNS query: content.powerapps.com
Source: global traffic	DNS traffic detected: DNS query: png.pngtree.com
Source: global traffic	DNS traffic detected: DNS query: portalpowerfiles.top
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net

Source: unknown

Source: chromecache_185.2.dr, chromecache_142.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_184.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_170.2.dr, chromecache_124.2.dr, chromecache_163.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_170.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://malsup.com/jquery/form/
Source: chromecache_124.2.dr, chromecache_163.2.dr	String found in binary or memory: http://medialize.github.io/URI.js
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://timeago.yarp.com/
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.coolite.com/
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.coolite.com/).
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.datejs.com/
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.datejs.com/license/.
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceObserver/PerformanceObserver
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming
Source: chromecache_186.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_117.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_117.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_132.2.dr, chromecache_164.2.dr, chromecache_178.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_124.2.dr, chromecache_163.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker
Source: chromecache_170.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker/
Source: chromecache_140.2.dr, chromecache_148.2.dr	String found in binary or memory: https://github.com/Microsoft/ApplicationInsights-JS#example-setting-cloud-role-name
Source: chromecache_154.2.dr, chromecache_143.2.dr	String found in binary or memory: https://github.com/gjunge/rateit.js
Source: chromecache_188.2.dr, chromecache_108.2.dr	String found in binary or memory: https://github.com/malsup/form
Source: chromecache_132.2.dr, chromecache_164.2.dr, chromecache_178.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_184.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_132.2.dr, chromecache_178.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_153.2.dr, chromecache_149.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_153.2.dr, chromecache_149.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_153.2.dr, chromecache_149.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_153.2.dr, chromecache_149.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_124.2.dr, chromecache_163.2.dr	String found in binary or memory: https://underscorejs.org

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal56.phis.win@17/148@30/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2272,i,10880344811088556588,10724681239299619440,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://laimilano.powerappsportals.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2572 --field-trial-handle=2272,i,10880344811088556588,10724681239299619440,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_109.2.dr, chromecache_146.2.dr, chromecache_153.2.dr, chromecache_116.2.dr, chromecache_149.2.dr, chromecache_186.2.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_109.2.dr, chromecache_146.2.dr, chromecache_153.2.dr, chromecache_116.2.dr, chromecache_149.2.dr, chromecache_186.2.dr	Binary or memory string: ",DisconnectVirtualMachine:"

ID:	1579871
Product:	CloudBasic
Start time:	13:19:55
Start date:	23.12.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://laimilano.powerappsportals.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Networking

System Summary

Malware Analysis System Evasion

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://laimilano.powerappsportals.com/

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Networking

System Summary

Malware Analysis System Evasion

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://laimilano.powerappsportals.com/