Windows Analysis Report
http://ionl.ca

Phishing

Source: http://ionl.ca/

Joe Sandbox AI: Page contains button: 'CLICK HERE' Source: '1.0.pages.csv'

Source: http://ionl.ca/

HTTP Parser: Base64 decoded: {"popupbox":{"id":"2","title":"Notice of Address Change","popup_name":"","description":"","category_id":"1","autoclose":"20","cookie":"43200","width":400,"height":500,"bgcolor":"#ffffff","textcolor":"#000000","bordersize":"1","bordercolor":"#ffffff","bord...

Source: http://ionl.ca/wp-content/uploads/2021/06/Global-Seating-7-Day-Quick-Ship-Program3.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/downloaded.pdf	HTTP Parser: No favicon

Compliance

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49742 version: TLS 1.2

Networking

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 23.218.208.109
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ionl.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.6.2 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ays-popup-box/public/css/animate.css?ver=5.0.5 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/genericons/genericons.css?ver=3.4.1 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/style.css?ver=6.6.2 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/css/bootstrap.min.css?ver=20150930 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/css/bootstrap-theme.min.css?ver=20150930 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/style.css?ver=20150930 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=7.9 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/js_composer/custom.css?ver=7.9 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ays-popup-box/public/js/ays-pb-public.js?ver=5.0.5 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/circleFit.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/img/logo-top.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?rev=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ays-popup-box/public/js/ays-pb-public.js?ver=5.0.5 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/circleFit.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?rev=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/img/logo-top.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/header01.jpg HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?rev=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/500-IMG_2508_855x525.jpg HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/mkt_workplace_810x440.jpg HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?rev=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/header01.jpg HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/500-IMG_2508_855x525.jpg HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/ays-popup-box/public/css/ays-pb-public-min.css?ver=5.0.5 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,*/*;q=0.1Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/mkt_workplace_810x440.jpg HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/js/bootstrap.min.js?ver=20151204 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.2.17 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/js/skip-link-focus-fix.js?ver=20151112 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=7.9 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/img/facebook-30.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/wp-content/themes/prime/style.css?ver=20150930Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/js/skip-link-focus-fix.js?ver=20151112 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/js/bootstrap.min.js?ver=20151204 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=7.9 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/prime/assets/img/facebook-30.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/bk-testimonials.jpg?id=551 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/installation-400x450.jpg HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.2.17Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /track/ctin.php?t=1735044226030&custnum=c291e5e867c41a37&sname=ionl.ca&pagename=php5-cgi&group=%2Fservices%2Fwebpages%2Fi%2Fo%2Fionl.ca%2Fcgi-bin&version=%24Rev%3A%207840%20%24&js=1&jv=0&resolution=1280x1024&color_depth=24&campaign=&referrer=&page_url=http%253A%252F%252Fionl.ca%252F&plugins=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B HTTP/1.1Host: count.carrierzone.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/installation-400x450.jpg HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/11/bk-testimonials.jpg?id=551 HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222
Source: global traffic	HTTP traffic detected: GET /track/ctin.php?t=1735044226030&custnum=c291e5e867c41a37&sname=ionl.ca&pagename=php5-cgi&group=%2Fservices%2Fwebpages%2Fi%2Fo%2Fionl.ca%2Fcgi-bin&version=%24Rev%3A%207840%20%24&js=1&jv=0&resolution=1280x1024&color_depth=24&campaign=&referrer=&page_url=http%253A%252F%252Fionl.ca%252F&plugins=PDF%20Viewer%3BChrome%20PDF%20Viewer%3BChromium%20PDF%20Viewer%3BMicrosoft%20Edge%20PDF%20Viewer%3BWebKit%20built-in%20PDF%3B HTTP/1.1Host: count.carrierzone.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /favicon-16x16.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /favicon-96x96.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /android-icon-192x192.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/Global-Seating-7-Day-Quick-Ship-Program3.pdf HTTP/1.1Host: ionl.caConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/wp-content/uploads/2021/06/Global-Seating-7-Day-Quick-Ship-Program3.pdfAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2021/06/Global-Seating-7-Day-Quick-Ship-Program3.pdf HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://ionl.ca/wp-content/uploads/2021/06/Global-Seating-7-Day-Quick-Ship-Program3.pdfAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227
Source: global traffic	HTTP traffic detected: GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1Host: ionl.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227

Source: global traffic	DNS traffic detected: DNS query: ionl.ca
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: fast.fonts.net
Source: global traffic	DNS traffic detected: DNS query: count.carrierzone.com

Source: unknown

HTTP traffic detected: POST /wp-admin/admin-ajax.php HTTP/1.1Host: ionl.caConnection: keep-aliveContent-Length: 34Accept: text/plain, */*; q=0.01X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Origin: http://ionl.caReferer: http://ionl.ca/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: ays_popup_cookie_2=Notice%20of%20Address%20Change; ays_show_popup_only_once_2=Notice%20of%20Address%20Change; _ga_S9ESYSL6PQ=GS1.1.1735044222.1.0.1735044222.0.0.0; _ga=GA1.1.669240536.1735044222; __utma=212917772.669240536.1735044222.1735044227.1735044227.1; __utmc=212917772; __utmz=212917772.1735044227.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; __utmb=212917772.1.10.1735044227Data Raw: 69 64 3d 32 26 61 63 74 69 6f 6e 3d 61 79 73 5f 69 6e 63 72 65 6d 65 6e 74 5f 70 62 5f 76 69 65 77 73 Data Ascii: id=2&action=ays_increment_pb_views

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Dec 2024 12:43:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Content-Encoding: gzipData Raw: 31 37 65 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5d eb 92 db 36 96 fe ad ae da 77 40 94 9a 91 14 8b 77 52 b7 be 64 1d c7 19 67 cb c9 78 c7 9e 71 4d d9 ae 2e 88 84 24 b6 29 92 21 a9 96 3a 3d 5d b5 af b1 af b7 4f b2 e7 00 bc 4a d4 bd b3 55 ab 6a 4b 24 70 2e 1f 0e 80 83 03 12 80 af be f9 f1 af af 3e fc f3 dd 6b 32 4b e6 de cd c5 15 fe 10 8f fa d3 eb 26 f3 a5 57 2f 9b c4 f6 68 1c 5f 37 fd 40 ba 8b 9b 48 c1 a8 73 73 d1 b8 b8 fa 46 92 c8 5f 82 60 ea 31 92 d0 29 69 4f e1 5b be 8b 3b 44 92 80 2c b6 23 37 4c 08 8d 1f 7c 9b c4 91 7d dd 9c 25 49 18 8f 14 65 b9 5c ca 53 ce 07 0c 73 ea d3 29 8b 64 3b 98 2b 28 40 b9 8b bf 77 9d eb bf 48 ef 87 af df ff f3 fd db de bb ff 6c de 5c 29 42 5a 2e f6 e6 82 90 a5 eb 3b c1 52 76 68 42 df d2 07 16 91 eb cd a4 7f fd 8b 7c fa 72 09 c4 93 85 6f 27 6e e0 13 d4 d1 ee 3c e6 24 72 b8 88 67 6d 1a 4d 17 73 e6 27 71 e7 f2 09 a8 39 51 eb 2e 6e 75 89 cf 96 e4 47 9a b0 76 a7 73 79 91 67 d9 81 3f 71 a7 90 dd 2a 03 6d 01 49 01 15 4c 44 e0 73 e5 b9 fe 57 12 31 ef ba 49 c3 d0 63 52 12 2c ec 99 e4 82 88 26 89 dd df 19 d8 d6 ea af ac 7e 93 cc 22 36 b9 6e 2a 82 0c 09 24 9e 21 87 fe b4 79 73 b0 b0 9e ba ea a9 75 c2 78 c6 91 c2 fa fa aa af d7 09 e3 19 c7 0a eb ad fa bd 5a 61 98 71 a4 30 4d 33 57 f0 af 4e 5c 9a 75 ac 40 5d 5d c1 bf 5a 81 22 eb 58 81 26 c0 30 eb 11 8a ac 63 05 5a fa 0a fe d5 0a 14 59 c7 0a 1c 40 b9 06 f5 45 16 59 f5 02 85 90 e4 21 64 70 3d 87 fe ab 20 59 2e 75 08 58 86 00 33 17 eb 3b 51 e0 3a a9 60 91 7b 8a 60 43 5f 19 45 e9 27 f4 9e 0b e4 a9 a7 88 1b f6 56 c3 de 86 38 9e 7a 8a 38 ad b7 d2 36 c5 f1 d4 7a 71 e0 fa dc 09 8b 93 9c 27 4b 00 27 0a 8a 52 fa 39 78 49 e2 d3 39 e8 9c c7 58 41 ae 4d d1 93 49 1f 5c 8f bd 0a bc 20 02 17 1d f8 09 78 af eb e6 b7 13 fe 39 88 f7 67 2c 41 89 57 99 c7 5b 1b 67 49 50 32 63 73 26 d9 3b 15 8b af 8b 86 e0 b3 67 34 8a 19 10 fd fd c3 4f d2 00 48 1a 65 79 f7 2e 5b 86 41 94 94 84 2d 5d 27 99 5d 3b 0c 2c c8 24 7e d3 25 ae ef 26 2e f5 a4 d8 a6 1e bb d6 b8 94 c2 94 61 14 4c a0 48 99 25 71 a4 81 81 66 3a 0f a7 72 10 4d 95 d5 c4 57 34 ce d3 c8 06 10 27 b0 b9 c7 97 b3 8b d7 1e e3 f7 7c b8 7b eb c6 09 f9 9e ec 27 92 a9 e3 b4 5b f7 21 8c 8d ad 0e 19 ed e1 f8 15 4a 4c 5e 5c 93 16 11 1c 97 a5 81 2d 71 13 8f dd bc 83 3a 21 7e 90 90 49 b0 f0 1d f2 e7 6f 07 ba a6 5d 92 9f 63 18 92 1d f2 d7 c9 04 4c 72 a5 08 da 8b 92 19 5b 51 30 0e 92 b8 95 1b b1 35 a7 2b 89 37 52 29 8c 18 1a 79 e4 c1 28 c7 5a 44 01 c6 dc 72 ad 38 79 f0 58 3c 63 2c 69 11 18 77 5b cb 50 1a 7b 81 fd 55 f2 dc 71 44 a3 07 c9 8e 41 2a 37 6b 2b 35 2b 34 20 4f b6 a9 02 a4 ae 6f 7b 0b 87 c5 0a 50 29 0e d8 43 a9 30 2b 5c ba 3c 77 7d 19 08 be bf 67 d1 75 4f ee c9 7a 4b 74 a2 56 c2 56 89 c2 15 cc 99 e3 d2 eb 16 f5 3c 01 90 33 72 40 dc 70 ae 2d 89 76 27 e0 82 5e 28 01 13 d8 d6 44 dd 5c
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Dec 2024 12:43:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Content-Encoding: gzipData Raw: 31 37 65 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5d eb 92 db 36 96 fe ad ae da 77 40 94 9a 91 14 8b 77 52 b7 be 64 1d c7 19 67 cb c9 78 c7 9e 71 4d d9 ae 2e 88 84 24 b6 29 92 21 a9 96 3a 3d 5d b5 af b1 af b7 4f b2 e7 00 bc 4a d4 bd b3 55 ab 6a 4b 24 70 2e 1f 0e 80 83 03 12 80 af be f9 f1 af af 3e fc f3 dd 6b 32 4b e6 de cd c5 15 fe 10 8f fa d3 eb 26 f3 a5 57 2f 9b c4 f6 68 1c 5f 37 fd 40 ba 8b 9b 48 c1 a8 73 73 d1 b8 b8 fa 46 92 c8 5f 82 60 ea 31 92 d0 29 69 4f e1 5b be 8b 3b 44 92 80 2c b6 23 37 4c 08 8d 1f 7c 9b c4 91 7d dd 9c 25 49 18 8f 14 65 b9 5c ca 53 ce 07 0c 73 ea d3 29 8b 64 3b 98 2b 28 40 b9 8b bf 77 9d eb bf 48 ef 87 af df ff f3 fd db de bb ff 6c de 5c 29 42 5a 2e f6 e6 82 90 a5 eb 3b c1 52 76 68 42 df d2 07 16 91 eb cd a4 7f fd 8b 7c fa 72 09 c4 93 85 6f 27 6e e0 13 d4 d1 ee 3c e6 24 72 b8 88 67 6d 1a 4d 17 73 e6 27 71 e7 f2 09 a8 39 51 eb 2e 6e 75 89 cf 96 e4 47 9a b0 76 a7 73 79 91 67 d9 81 3f 71 a7 90 dd 2a 03 6d 01 49 01 15 4c 44 e0 73 e5 b9 fe 57 12 31 ef ba 49 c3 d0 63 52 12 2c ec 99 e4 82 88 26 89 dd df 19 d8 d6 ea af ac 7e 93 cc 22 36 b9 6e 2a 82 0c 09 24 9e 21 87 fe b4 79 73 b0 b0 9e ba ea a9 75 c2 78 c6 91 c2 fa fa aa af d7 09 e3 19 c7 0a eb ad fa bd 5a 61 98 71 a4 30 4d 33 57 f0 af 4e 5c 9a 75 ac 40 5d 5d c1 bf 5a 81 22 eb 58 81 26 c0 30 eb 11 8a ac 63 05 5a fa 0a fe d5 0a 14 59 c7 0a 1c 40 b9 06 f5 45 16 59 f5 02 85 90 e4 21 64 70 3d 87 fe ab 20 59 2e 75 08 58 86 00 33 17 eb 3b 51 e0 3a a9 60 91 7b 8a 60 43 5f 19 45 e9 27 f4 9e 0b e4 a9 a7 88 1b f6 56 c3 de 86 38 9e 7a 8a 38 ad b7 d2 36 c5 f1 d4 7a 71 e0 fa dc 09 8b 93 9c 27 4b 00 27 0a 8a 52 fa 39 78 49 e2 d3 39 e8 9c c7 58 41 ae 4d d1 93 49 1f 5c 8f bd 0a bc 20 02 17 1d f8 09 78 af eb e6 b7 13 fe 39 88 f7 67 2c 41 89 57 99 c7 5b 1b 67 49 50 32 63 73 26 d9 3b 15 8b af 8b 86 e0 b3 67 34 8a 19 10 fd fd c3 4f d2 00 48 1a 65 79 f7 2e 5b 86 41 94 94 84 2d 5d 27 99 5d 3b 0c 2c c8 24 7e d3 25 ae ef 26 2e f5 a4 d8 a6 1e bb d6 b8 94 c2 94 61 14 4c a0 48 99 25 71 a4 81 81 66 3a 0f a7 72 10 4d 95 d5 c4 57 34 ce d3 c8 06 10 27 b0 b9 c7 97 b3 8b d7 1e e3 f7 7c b8 7b eb c6 09 f9 9e ec 27 92 a9 e3 b4 5b f7 21 8c 8d ad 0e 19 ed e1 f8 15 4a 4c 5e 5c 93 16 11 1c 97 a5 81 2d 71 13 8f dd bc 83 3a 21 7e 90 90 49 b0 f0 1d f2 e7 6f 07 ba a6 5d 92 9f 63 18 92 1d f2 d7 c9 04 4c 72 a5 08 da 8b 92 19 5b 51 30 0e 92 b8 95 1b b1 35 a7 2b 89 37 52 29 8c 18 1a 79 e4 c1 28 c7 5a 44 01 c6 dc 72 ad 38 79 f0 58 3c 63 2c 69 11 18 77 5b cb 50 1a 7b 81 fd 55 f2 dc 71 44 a3 07 c9 8e 41 2a 37 6b 2b 35 2b 34 20 4f b6 a9 02 a4 ae 6f 7b 0b 87 c5 0a 50 29 0e d8 43 a9 30 2b 5c ba 3c 77 7d 19 08 be bf 67 d1 75 4f ee c9 7a 4b 74 a2 56 c2 56 89 c2 15 cc 99 e3 d2 eb 16 f5 3c 01 90 33 72 40 dc 70 ae 2d 89 76 27 e0 82 5e 28 01 13 d8 d6 44 dd 5c
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Dec 2024 12:43:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Content-Encoding: gzipData Raw: 31 37 65 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5d eb 92 db 36 96 fe ad ae da 77 40 94 9a 91 14 8b 77 52 b7 be 64 1d c7 19 67 cb c9 78 c7 9e 71 4d d9 ae 2e 88 84 24 b6 29 92 21 a9 96 3a 3d 5d b5 af b1 af b7 4f b2 e7 00 bc 4a d4 bd b3 55 ab 6a 4b 24 70 2e 1f 0e 80 83 03 12 80 af be f9 f1 af af 3e fc f3 dd 6b 32 4b e6 de cd c5 15 fe 10 8f fa d3 eb 26 f3 a5 57 2f 9b c4 f6 68 1c 5f 37 fd 40 ba 8b 9b 48 c1 a8 73 73 d1 b8 b8 fa 46 92 c8 5f 82 60 ea 31 92 d0 29 69 4f e1 5b be 8b 3b 44 92 80 2c b6 23 37 4c 08 8d 1f 7c 9b c4 91 7d dd 9c 25 49 18 8f 14 65 b9 5c ca 53 ce 07 0c 73 ea d3 29 8b 64 3b 98 2b 28 40 b9 8b bf 77 9d eb bf 48 ef 87 af df ff f3 fd db de bb ff 6c de 5c 29 42 5a 2e f6 e6 82 90 a5 eb 3b c1 52 76 68 42 df d2 07 16 91 eb cd a4 7f fd 8b 7c fa 72 09 c4 93 85 6f 27 6e e0 13 d4 d1 ee 3c e6 24 72 b8 88 67 6d 1a 4d 17 73 e6 27 71 e7 f2 09 a8 39 51 eb 2e 6e 75 89 cf 96 e4 47 9a b0 76 a7 73 79 91 67 d9 81 3f 71 a7 90 dd 2a 03 6d 01 49 01 15 4c 44 e0 73 e5 b9 fe 57 12 31 ef ba 49 c3 d0 63 52 12 2c ec 99 e4 82 88 26 89 dd df 19 d8 d6 ea af ac 7e 93 cc 22 36 b9 6e 2a 82 0c 09 24 9e 21 87 fe b4 79 73 b0 b0 9e ba ea a9 75 c2 78 c6 91 c2 fa fa aa af d7 09 e3 19 c7 0a eb ad fa bd 5a 61 98 71 a4 30 4d 33 57 f0 af 4e 5c 9a 75 ac 40 5d 5d c1 bf 5a 81 22 eb 58 81 26 c0 30 eb 11 8a ac 63 05 5a fa 0a fe d5 0a 14 59 c7 0a 1c 40 b9 06 f5 45 16 59 f5 02 85 90 e4 21 64 70 3d 87 fe ab 20 59 2e 75 08 58 86 00 33 17 eb 3b 51 e0 3a a9 60 91 7b 8a 60 43 5f 19 45 e9 27 f4 9e 0b e4 a9 a7 88 1b f6 56 c3 de 86 38 9e 7a 8a 38 ad b7 d2 36 c5 f1 d4 7a 71 e0 fa dc 09 8b 93 9c 27 4b 00 27 0a 8a 52 fa 39 78 49 e2 d3 39 e8 9c c7 58 41 ae 4d d1 93 49 1f 5c 8f bd 0a bc 20 02 17 1d f8 09 78 af eb e6 b7 13 fe 39 88 f7 67 2c 41 89 57 99 c7 5b 1b 67 49 50 32 63 73 26 d9 3b 15 8b af 8b 86 e0 b3 67 34 8a 19 10 fd fd c3 4f d2 00 48 1a 65 79 f7 2e 5b 86 41 94 94 84 2d 5d 27 99 5d 3b 0c 2c c8 24 7e d3 25 ae ef 26 2e f5 a4 d8 a6 1e bb d6 b8 94 c2 94 61 14 4c a0 48 99 25 71 a4 81 81 66 3a 0f a7 72 10 4d 95 d5 c4 57 34 ce d3 c8 06 10 27 b0 b9 c7 97 b3 8b d7 1e e3 f7 7c b8 7b eb c6 09 f9 9e ec 27 92 a9 e3 b4 5b f7 21 8c 8d ad 0e 19 ed e1 f8 15 4a 4c 5e 5c 93 16 11 1c 97 a5 81 2d 71 13 8f dd bc 83 3a 21 7e 90 90 49 b0 f0 1d f2 e7 6f 07 ba a6 5d 92 9f 63 18 92 1d f2 d7 c9 04 4c 72 a5 08 da 8b 92 19 5b 51 30 0e 92 b8 95 1b b1 35 a7 2b 89 37 52 29 8c 18 1a 79 e4 c1 28 c7 5a 44 01 c6 dc 72 ad 38 79 f0 58 3c 63 2c 69 11 18 77 5b cb 50 1a 7b 81 fd 55 f2 dc 71 44 a3 07 c9 8e 41 2a 37 6b 2b 35 2b 34 20 4f b6 a9 02 a4 ae 6f 7b 0b 87 c5 0a 50 29 0e d8 43 a9 30 2b 5c ba 3c 77 7d 19 08 be bf 67 d1 75 4f ee c9 7a 4b 74 a2 56 c2 56 89 c2 15 cc 99 e3 d2 eb 16 f5 3c 01 90 33 72 40 dc 70 ae 2d 89 76 27 e0 82 5e 28 01 13 d8 d6 44 dd 5c
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Dec 2024 12:43:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: keep-aliveExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Content-Encoding: gzipData Raw: 31 37 65 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 5d eb 92 db 36 96 fe ad ae da 77 40 94 9a 91 14 8b 77 52 b7 be 64 1d c7 19 67 cb c9 78 c7 9e 71 4d d9 ae 2e 88 84 24 b6 29 92 21 a9 96 3a 3d 5d b5 af b1 af b7 4f b2 e7 00 bc 4a d4 bd b3 55 ab 6a 4b 24 70 2e 1f 0e 80 83 03 12 80 af be f9 f1 af af 3e fc f3 dd 6b 32 4b e6 de cd c5 15 fe 10 8f fa d3 eb 26 f3 a5 57 2f 9b c4 f6 68 1c 5f 37 fd 40 ba 8b 9b 48 c1 a8 73 73 d1 b8 b8 fa 46 92 c8 5f 82 60 ea 31 92 d0 29 69 4f e1 5b be 8b 3b 44 92 80 2c b6 23 37 4c 08 8d 1f 7c 9b c4 91 7d dd 9c 25 49 18 8f 14 65 b9 5c ca 53 ce 07 0c 73 ea d3 29 8b 64 3b 98 2b 28 40 b9 8b bf 77 9d eb bf 48 ef 87 af df ff f3 fd db de bb ff 6c de 5c 29 42 5a 2e f6 e6 82 90 a5 eb 3b c1 52 76 68 42 df d2 07 16 91 eb cd a4 7f fd 8b 7c fa 72 09 c4 93 85 6f 27 6e e0 13 d4 d1 ee 3c e6 24 72 b8 88 67 6d 1a 4d 17 73 e6 27 71 e7 f2 09 a8 39 51 eb 2e 6e 75 89 cf 96 e4 47 9a b0 76 a7 73 79 91 67 d9 81 3f 71 a7 90 dd 2a 03 6d 01 49 01 15 4c 44 e0 73 e5 b9 fe 57 12 31 ef ba 49 c3 d0 63 52 12 2c ec 99 e4 82 88 26 89 dd df 19 d8 d6 ea af ac 7e 93 cc 22 36 b9 6e 2a 82 0c 09 24 9e 21 87 fe b4 79 73 b0 b0 9e ba ea a9 75 c2 78 c6 91 c2 fa fa aa af d7 09 e3 19 c7 0a eb ad fa bd 5a 61 98 71 a4 30 4d 33 57 f0 af 4e 5c 9a 75 ac 40 5d 5d c1 bf 5a 81 22 eb 58 81 26 c0 30 eb 11 8a ac 63 05 5a fa 0a fe d5 0a 14 59 c7 0a 1c 40 b9 06 f5 45 16 59 f5 02 85 90 e4 21 64 70 3d 87 fe ab 20 59 2e 75 08 58 86 00 33 17 eb 3b 51 e0 3a a9 60 91 7b 8a 60 43 5f 19 45 e9 27 f4 9e 0b e4 a9 a7 88 1b f6 56 c3 de 86 38 9e 7a 8a 38 ad b7 d2 36 c5 f1 d4 7a 71 e0 fa dc 09 8b 93 9c 27 4b 00 27 0a 8a 52 fa 39 78 49 e2 d3 39 e8 9c c7 58 41 ae 4d d1 93 49 1f 5c 8f bd 0a bc 20 02 17 1d f8 09 78 af eb e6 b7 13 fe 39 88 f7 67 2c 41 89 57 99 c7 5b 1b 67 49 50 32 63 73 26 d9 3b 15 8b af 8b 86 e0 b3 67 34 8a 19 10 fd fd c3 4f d2 00 48 1a 65 79 f7 2e 5b 86 41 94 94 84 2d 5d 27 99 5d 3b 0c 2c c8 24 7e d3 25 ae ef 26 2e f5 a4 d8 a6 1e bb d6 b8 94 c2 94 61 14 4c a0 48 99 25 71 a4 81 81 66 3a 0f a7 72 10 4d 95 d5 c4 57 34 ce d3 c8 06 10 27 b0 b9 c7 97 b3 8b d7 1e e3 f7 7c b8 7b eb c6 09 f9 9e ec 27 92 a9 e3 b4 5b f7 21 8c 8d ad 0e 19 ed e1 f8 15 4a 4c 5e 5c 93 16 11 1c 97 a5 81 2d 71 13 8f dd bc 83 3a 21 7e 90 90 49 b0 f0 1d f2 e7 6f 07 ba a6 5d 92 9f 63 18 92 1d f2 d7 c9 04 4c 72 a5 08 da 8b 92 19 5b 51 30 0e 92 b8 95 1b b1 35 a7 2b 89 37 52 29 8c 18 1a 79 e4 c1 28 c7 5a 44 01 c6 dc 72 ad 38 79 f0 58 3c 63 2c 69 11 18 77 5b cb 50 1a 7b 81 fd 55 f2 dc 71 44 a3 07 c9 8e 41 2a 37 6b 2b 35 2b 34 20 4f b6 a9 02 a4 ae 6f 7b 0b 87 c5 0a 50 29 0e d8 43 a9 30 2b 5c ba 3c 77 7d 19 08 be bf 67 d1 75 4f ee c9 7a 4b 74 a2 56 c2 56 89 c2 15 cc 99 e3 d2 eb 16 f5 3c 01 90 33 72 40 dc 70 ae 2d 89 76 27 e0 82 5e 28 01 13 d8 d6 44 dd 5c

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.16:49742 version: TLS 1.2

System Summary

Source: classification engine

Classification label: sus21.win@26/47@20/187

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2004,i,7577569698952660962,12297675400179224436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://ionl.ca"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2004,i,7577569698952660962,12297675400179224436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Source: Window Recorder

Window detected: More than 3 window changes detected

Boot Survival

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk