Play interactive tourEdit tour

Windows Analysis Report
https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN

Overview

General Information

Sample URL:	https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4
Analysis ID:	1587551
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Detected non-DNS traffic on DNS port

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://wrcgowtegwyhaswcyczcyoup1wfxnrz5svvakqq2fkxnouvicqnwbo69kz.ivertoneym.ru/mxvqxrmutwfcoianaddrwjgxrKlxzINTZJVZCSXKMJFBKLZIFQFNPWTFUPAAMWNPWNOOOXLWSMPEGWQQNMLAKV

Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 1.17.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://r2vk.deripaud.ru/n682ZHUO/... This script exhibits several high-risk behaviors, including disabling common developer tools and keyboard shortcuts, as well as redirecting the user to a suspicious domain (login.microsoftonline.com) after a delay. The script appears to be attempting to detect and prevent security analysis, which is a strong indicator of malicious intent.
Source: 1.16.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://r2vk.deripaud.ru/n682ZHUO/... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-debugging techniques further increase the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent.
Source: 1.18.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://r2vk.deripaud.ru/n682ZHUO/... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and the interaction with an unknown domain 'WrCGowTegwyHASWcycZCyoup1WFXnrZ5svVaKQq2FkxnoUVicQNWbO69kZ.ivertoneym.ru' further increase the risk. Additionally, the script attempts to bypass form submission, which is a suspicious behavior. Overall, this script demonstrates a high level of malicious intent and poses a significant security risk.

HTML body contains low number of good links

Source: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	HTTP Parser: Number of links: 1
Source: https://sign.zoho.com/zsstateless#/review/234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a?request_id=439502000000037009&action_id=439502000000037034&same_user=false&zs_user=true&zs_user_in_multiple_portals=false&recipient_org_id=873868833&user_loggedin=false&ishost=false&locale=en&is_invoked_from_mail=true&is_doc_corrected=false&is_zoho_user=true	HTTP Parser: Number of links: 1
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721136305074773.MDc0YzU5OTgtYzljZS00ZDA3LWE3NDktMmYwYThlYjc2MzRiMGM5YmYyZjItZmVmZi00N2EyLWEyMDUtNTVkZGU5NjY1NWY5&ui_locales=en-US&mkt=en-US&client-request-id=7fdae5c3-923b-4ef5-83cb-0a4c47d44caf&state=_jlTBaQeEfzn-LfoY1MPtDBWnNrS4uymP6-nkzo_l5ay-6JE2LnTWHoUJ31QFVPlRda-uVuq0iO96RUmhgcLykeLs1UGarEsvtA0uhrEUfryGLGL9A3nnPWBE6NcCMiuHK803GtXz_9cxT20ha_S06G7yX3RS56C7dEbL_w2MoeyA74ZqEBLxr4Q9w4m4IGGzVgmMhMMfSpMwOAqSXn9qrKwgdQkNeiG43ZQBC5GbV8CCWgwnGofreT8RDdnJEvfUZkExjSp274TT8T4ZwayAw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: Number of links: 0

HTML body contains password input but no form action

Source: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN

HTTP Parser: <input type="password" .../> found but no <form action="...

HTML page contains hidden javascript code

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721136305074773.MDc0YzU5OTgtYzljZS00ZDA3LWE3NDktMmYwYThlYjc2MzRiMGM5YmYyZjItZmVmZi00N2EyLWEyMDUtNTVkZGU5NjY1NWY5&ui_locales=en-US&mkt=en-US&client-request-id=7fdae5c3-923b-4ef5-83cb-0a4c47d44caf&state=_jlTBaQeEfzn-LfoY1MPtDBWnNrS4uymP6-nkzo_l5ay-6JE2LnTWHoUJ31QFVPlRda-uVuq0iO96RUmhgcLykeLs1UGarEsvtA0uhrEUfryGLGL9A3nnPWBE6NcCMiuHK803GtXz_9cxT20ha_S06G7yX3RS56C7dEbL_w2MoeyA74ZqEBLxr4Q9w4m4IGGzVgmMhMMfSpMwOAqSXn9qrKwgdQkNeiG43ZQBC5GbV8CCWgwnGofreT8RDdnJEvfUZkExjSp274TT8T4ZwayAw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Base64 decoded: 074c5998-c9ce-4d07-a749-2f0a8eb7634b0c9bf2f2-feff-47a2-a205-55dde96655f9

HTML title does not match URL

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721136305074773.MDc0YzU5OTgtYzljZS00ZDA3LWE3NDktMmYwYThlYjc2MzRiMGM5YmYyZjItZmVmZi00N2EyLWEyMDUtNTVkZGU5NjY1NWY5&ui_locales=en-US&mkt=en-US&client-request-id=7fdae5c3-923b-4ef5-83cb-0a4c47d44caf&state=_jlTBaQeEfzn-LfoY1MPtDBWnNrS4uymP6-nkzo_l5ay-6JE2LnTWHoUJ31QFVPlRda-uVuq0iO96RUmhgcLykeLs1UGarEsvtA0uhrEUfryGLGL9A3nnPWBE6NcCMiuHK803GtXz_9cxT20ha_S06G7yX3RS56C7dEbL_w2MoeyA74ZqEBLxr4Q9w4m4IGGzVgmMhMMfSpMwOAqSXn9qrKwgdQkNeiG43ZQBC5GbV8CCWgwnGofreT8RDdnJEvfUZkExjSp274TT8T4ZwayAw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: Title: Redirecting does not match URL

HTML body contains password input

Source: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN

HTTP Parser: <input type="password" .../> found

HTML page is missing a favicon

Source: https://r2vk.deripaud.ru/n682ZHUO/

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721136305074773.MDc0YzU5OTgtYzljZS00ZDA3LWE3NDktMmYwYThlYjc2MzRiMGM5YmYyZjItZmVmZi00N2EyLWEyMDUtNTVkZGU5NjY1NWY5&ui_locales=en-US&mkt=en-US&client-request-id=7fdae5c3-923b-4ef5-83cb-0a4c47d44caf&state=_jlTBaQeEfzn-LfoY1MPtDBWnNrS4uymP6-nkzo_l5ay-6JE2LnTWHoUJ31QFVPlRda-uVuq0iO96RUmhgcLykeLs1UGarEsvtA0uhrEUfryGLGL9A3nnPWBE6NcCMiuHK803GtXz_9cxT20ha_S06G7yX3RS56C7dEbL_w2MoeyA74ZqEBLxr4Q9w4m4IGGzVgmMhMMfSpMwOAqSXn9qrKwgdQkNeiG43ZQBC5GbV8CCWgwnGofreT8RDdnJEvfUZkExjSp274TT8T4ZwayAw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0

HTTP Parser: No favicon

META author tag missing

Source: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	HTTP Parser: No <meta name="author".. found
Source: https://sign.zoho.com/zsstateless#/review/234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a?request_id=439502000000037009&action_id=439502000000037034&same_user=false&zs_user=true&zs_user_in_multiple_portals=false&recipient_org_id=873868833&user_loggedin=false&ishost=false&locale=en&is_invoked_from_mail=true&is_doc_corrected=false&is_zoho_user=true	HTTP Parser: No <meta name="author".. found
Source: https://sign.zoho.com/zsstateless#/review/234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a?request_id=439502000000037009&action_id=439502000000037034&same_user=false&zs_user=true&zs_user_in_multiple_portals=false&recipient_org_id=873868833&user_loggedin=false&ishost=false&locale=en&is_invoked_from_mail=true&is_doc_corrected=false&is_zoho_user=true	HTTP Parser: No <meta name="author".. found
Source: https://sign.zoho.com/zsstateless#/review/234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a?request_id=439502000000037009&action_id=439502000000037034&same_user=false&zs_user=true&zs_user_in_multiple_portals=false&recipient_org_id=873868833&user_loggedin=false&ishost=false&locale=en&is_invoked_from_mail=true&is_doc_corrected=false&is_zoho_user=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721136305074773.MDc0YzU5OTgtYzljZS00ZDA3LWE3NDktMmYwYThlYjc2MzRiMGM5YmYyZjItZmVmZi00N2EyLWEyMDUtNTVkZGU5NjY1NWY5&ui_locales=en-US&mkt=en-US&client-request-id=7fdae5c3-923b-4ef5-83cb-0a4c47d44caf&state=_jlTBaQeEfzn-LfoY1MPtDBWnNrS4uymP6-nkzo_l5ay-6JE2LnTWHoUJ31QFVPlRda-uVuq0iO96RUmhgcLykeLs1UGarEsvtA0uhrEUfryGLGL9A3nnPWBE6NcCMiuHK803GtXz_9cxT20ha_S06G7yX3RS56C7dEbL_w2MoeyA74ZqEBLxr4Q9w4m4IGGzVgmMhMMfSpMwOAqSXn9qrKwgdQkNeiG43ZQBC5GbV8CCWgwnGofreT8RDdnJEvfUZkExjSp274TT8T4ZwayAw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN	HTTP Parser: No <meta name="copyright".. found
Source: https://sign.zoho.com/zsstateless#/review/234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a?request_id=439502000000037009&action_id=439502000000037034&same_user=false&zs_user=true&zs_user_in_multiple_portals=false&recipient_org_id=873868833&user_loggedin=false&ishost=false&locale=en&is_invoked_from_mail=true&is_doc_corrected=false&is_zoho_user=true	HTTP Parser: No <meta name="copyright".. found
Source: https://sign.zoho.com/zsstateless#/review/234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a?request_id=439502000000037009&action_id=439502000000037034&same_user=false&zs_user=true&zs_user_in_multiple_portals=false&recipient_org_id=873868833&user_loggedin=false&ishost=false&locale=en&is_invoked_from_mail=true&is_doc_corrected=false&is_zoho_user=true	HTTP Parser: No <meta name="copyright".. found
Source: https://sign.zoho.com/zsstateless#/review/234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a?request_id=439502000000037009&action_id=439502000000037034&same_user=false&zs_user=true&zs_user_in_multiple_portals=false&recipient_org_id=873868833&user_loggedin=false&ishost=false&locale=en&is_invoked_from_mail=true&is_doc_corrected=false&is_zoho_user=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638721136305074773.MDc0YzU5OTgtYzljZS00ZDA3LWE3NDktMmYwYThlYjc2MzRiMGM5YmYyZjItZmVmZi00N2EyLWEyMDUtNTVkZGU5NjY1NWY5&ui_locales=en-US&mkt=en-US&client-request-id=7fdae5c3-923b-4ef5-83cb-0a4c47d44caf&state=_jlTBaQeEfzn-LfoY1MPtDBWnNrS4uymP6-nkzo_l5ay-6JE2LnTWHoUJ31QFVPlRda-uVuq0iO96RUmhgcLykeLs1UGarEsvtA0uhrEUfryGLGL9A3nnPWBE6NcCMiuHK803GtXz_9cxT20ha_S06G7yX3RS56C7dEbL_w2MoeyA74ZqEBLxr4Q9w4m4IGGzVgmMhMMfSpMwOAqSXn9qrKwgdQkNeiG43ZQBC5GbV8CCWgwnGofreT8RDdnJEvfUZkExjSp274TT8T4ZwayAw&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	HTTP Parser: No <meta name="copyright".. found

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:58991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59093 version: TLS 1.2

Software Vulnerabilities

Allocates a big amount of memory (probably used for heap spraying)

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 42MB

Networking

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.6:58891 -> 1.1.1.1:53

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/sign_util.27ef99e12eb7c24712a2093a40589373.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/vendor.169a8e414b24f4a6480e50696c4ffaff.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/style.38261ba90d463ad171c35ae367ea107f.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/embercli.d41d8cd98f00b204e9800998ecf8427e.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/style-max-767.b87cc62956d08864c4c24729d88e2544.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/security_regex.901d17830b94677bb2947d77f91e738a.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/vendor.91adcec1eab45c3679c369daf3bdf67f.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/kba.11c929b27f3d202a6ea190005cc20320.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/guest.7bee776613952218d6ed33cd033ec007.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/otp-section.db89617974b5a785b5e8a3ff352579ea.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/ztopbar-min.f9e901feef6e19e1b7b4d4b2e576e2c4.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/fonts/font-styles.ec7bd066b09e33723d05755f854193be.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/sign_util.27ef99e12eb7c24712a2093a40589373.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/security_regex.901d17830b94677bb2947d77f91e738a.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/kba.11c929b27f3d202a6ea190005cc20320.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/guest.7bee776613952218d6ed33cd033ec007.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/otp-section.db89617974b5a785b5e8a3ff352579ea.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/images/sign-logo.4f94dc244b3a67e8a98ae2c6af38fe1f.png HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/images/sign-logo.4f94dc244b3a67e8a98ae2c6af38fe1f.png HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /sign/assets/vendor.91adcec1eab45c3679c369daf3bdf67f.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /latoregular/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/accounts/supportedlanguages HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8
Source: global traffic	HTTP traffic detected: GET /api/v1/messages/unauthenticated?locale=en HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8
Source: global traffic	HTTP traffic detected: GET /api/v1/accounts/supportedlanguages HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8
Source: global traffic	HTTP traffic detected: GET /api/v1/messages/unauthenticated?locale=en HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/brandinglogo?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/brandinglogo?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/actions?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/actions?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8
Source: global traffic	HTTP traffic detected: GET /sign/images/favicon.0846a82d826c9b9110a4b74674376afc.ico HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latobold/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/images/favicon.0846a82d826c9b9110a4b74674376afc.ico HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /zsstateless HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/actions/439502000000037034/verify HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959
Source: global traffic	HTTP traffic detected: GET /npm/@eid-easy/eideasy-widget@2.123.0/dist/full/eideasy-widget.umd.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/ui.jqgrid.57b07ffd717e01eff86dfaee905f2079.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/detectpinchzoom.9a3262979c0e18a9a0c9b060f33542f6.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/fonts/font-styles-2.07bb8d27292e00c83d5da3459a0f5930.css HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/pdf.5908c391a51cfb118cff8004a60280b9.mjs HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/embercli.efe201d5a43b468534cfe4f9171161f4.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/deeplink-to-native-app.min.bc05ab6da09b6cfedb61d605aafc2443.js HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/detectpinchzoom.9a3262979c0e18a9a0c9b060f33542f6.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /sign/assets/deeplink-to-native-app.min.bc05ab6da09b6cfedb61d605aafc2443.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /sign/assets/pdf.5908c391a51cfb118cff8004a60280b9.mjs HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /npm/@eid-easy/eideasy-widget@2.123.0/dist/full/eideasy-widget.umd.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/messages HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsstatelessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /sign/assets/embercli.efe201d5a43b468534cfe4f9171161f4.js HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/requests/439502000000037009/actions/439502000000037034?locale=en HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsstatelessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/actions/legalterms?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&locale=en HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsstatelessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/brandinglogo?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsstatelessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/messages HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/actions/legalterms?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&locale=en HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/brandinglogo?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /sign/images/Signpass-QR-code.31d2a0f12d1f71d4a79edb96e8491657.png HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/images/bulk.086ccb9b468bcf15d1ae23bf798fc7da.svg HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/requests/439502000000037009/actions/439502000000037034/allowedCloudproviders HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsstatelessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/getSignaturePanelConfiguration?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsstatelessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /images/white.png HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sign.zoho.com/zsstatelessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/requests/439502000000037009/actions/439502000000037034?locale=en HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /robotoregular/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /robotobold/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /robotoitalic/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /robotobolditalic/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liberationserif/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/requests/439502000000037009/actions/439502000000037034/documents/439502000000037010/getdownloadurl HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /sign/images/Signpass-QR-code.31d2a0f12d1f71d4a79edb96e8491657.png HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /sign/assets/pdf.worker.3ad5c41d90ecae4e544c09e22d7f2309.mjs HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveOrigin: https://sign.zoho.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/images/bulk.086ccb9b468bcf15d1ae23bf798fc7da.svg HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/getSignaturePanelConfiguration?sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /api/v1/guest/requests/439502000000037009/actions/439502000000037034/allowedCloudproviders HTTP/1.1Host: sign.zoho.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; stateless_auth=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kXlXGVbGZ7YzuXZ9WhCeiWATle10h6Tuwtd4fVRAm0I9Wtg10eTxWRQB8e%2FH1ylSCSiyZAfytmOTQeA0KFz6wjnk6GQdAFF%2FFo4twi2TRWn3e5vsnpMEieU3vwRNdlOn%2BtgmIYzAoyeV%2FCZMjV0y2GkT4mcYfZI9LvmYH%2BIbNYtLsy0qRsqnmBQSAD8rNirP8byybviIilEtzY84Hpy%2FrmyiaAsckLO3bK0QbLSOxjvpi0hH2OYb4%2FAsxpyveWGA7XCCmvqBBXavA%2FECFyS8%2FsiMFM1wR2bEFrlS%2FO6ksJO4XlTSONVYC28I5FFwL6NTZLrzzEKF%2BPLAWwOfJGLqwIDAQAB-gGfpbWoyoc6HDAEL2mtNC%2BucoXM%2FRsI8hphIvniKtsJYlZy1i7VofboEKWBQ6hN4tH%2B8H8oFBiOHu8vBzsKqyod0RI3u82VYdQeugxSOj31ieoK%2FFTqCGYTQCvnt4ZwQDsOfblZgRmHCQrdII7j8hj8avbMbJZnHfTaag39D6SvPqDVE7C%2BxexMDQvQUjTBkDCS0So4Q0H2Z890drDnaQQE93FxnlS9k7%2FcbOJOZmFSuudsm6QzxaOuG1GD83K5zvkmPvaOId2kOjODf1yW4CT7vPpE1kl85VzGtUEBWIqDYjnpARkzprdqSmSlC3KvcEVZPnvVSM9VsWE5p0hSQ%2Fg%3D%3D-f4b47fce91f0c1e5c121c8138e675856bcc07be199639095c76855da9290ea226988d350d7f911e828918ec543ddfb32d650b751a6a1deb888135fa5f08aef4a0f70e9cc89c51fda77b1293af38c8cbf94704664c7197c5499b629409aa9c90c884e2ad4ec9ca2c8f1872fae42fe85e319d060f7a26f755cfc7a8980a304bf1b-1736516778959; zscsrfcookie_slauth=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145; _zcsr_tmp=7e0b0861719e672e8177abdfdf2c3b62586dae7f3960f89b0a97316638df3a242778f7e203a2c688fd3368b22a94979828f762bb32a95f0f27bf2f31aec38145
Source: global traffic	HTTP traffic detected: GET /liberationserifbold/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /heuristicaitalic/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liberationserifitalic/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /liberationserifbolditalic/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /heuristicaregular/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /heuristicabold/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /heuristicabolditalic/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dejavusans/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dejavusansbold/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dejavusansoblique/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dejavusansboldoblique/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /texgyrecursorregular/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /texgyrecursorbold/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/fonts/fonts/Pretty-Pen-Regular.9120a26d7e3ec6bfab356b5b7d1851df.ttf HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/sign/fonts/font-styles.ec7bd066b09e33723d05755f854193be.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/fonts/fonts/Sweetly-Broken-SemiBold.e3a3c867db18ca73725b5b164fa661b2.ttf HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/sign/fonts/font-styles.ec7bd066b09e33723d05755f854193be.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/fonts/fonts/Fancy-Signature.929c36b43ade363591b36c08f8f7f8c9.ttf HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/sign/fonts/font-styles.ec7bd066b09e33723d05755f854193be.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /texgyrecursoritalic/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/fonts/fonts/zs-font.774f6cf073cc7d6e63e742fb6135e80b.woff HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/sign/fonts/font-styles.ec7bd066b09e33723d05755f854193be.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /texgyrecursorbolditalic/font.woff2 HTTP/1.1Host: webfonts.zohowebstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sign/assets/pdf.worker.3ad5c41d90ecae4e544c09e22d7f2309.mjs HTTP/1.1Host: static.zohocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_98bac1f50f=1bdd1758c8ab4f7d97e00e1193022b96
Source: global traffic	HTTP traffic detected: GET /sign/fonts/glyphicons-halflings-regular.448c34a56d699c29117adc64c43affeb.woff2 HTTP/1.1Host: static.zohocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://sign.zoho.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://static.zohocdn.com/sign/assets/vendor.169a8e414b24f4a6480e50696c4ffaff.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/public/ZohoSign/download_chunk?x-service=ZohoSign&x-cli-msg=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&event-id=ODc1Njk0NzE2LTQzOTUwMjAwMDAwMDAzNzAwOS00Mzk1MDIwMDAwMDAwMzcwMzQtNDM5NTAyMDAwMDAwMDM3MDEwLWZhbHNlLTE3MzY1MTY3ODc3Mzk= HTTP/1.1Host: files-accl.zohopublic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://sign.zoho.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest HTTP/1.1Host: sign.zoho.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://sign.zoho.com/zsstatelessAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/public/ZohoSign/download_chunk?x-service=ZohoSign&x-cli-msg=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&event-id=ODc1Njk0NzE2LTQzOTUwMjAwMDAwMDAzNzAwOS00Mzk1MDIwMDAwMDAwMzcwMzQtNDM5NTAyMDAwMDAwMDM3MDEwLWZhbHNlLTE3MzY1MTY3ODc3Mzk= HTTP/1.1Host: files-accl.zohopublic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _zcsr_tmp=517c8e21-4504-4532-8e13-ea74af974af8; drscc=517c8e21-4504-4532-8e13-ea74af974af8
Source: global traffic	HTTP traffic detected: GET /n682ZHUO/ HTTP/1.1Host: r2vk.deripaud.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://r2vk.deripaud.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://r2vk.deripaud.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://r2vk.deripaud.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://r2vk.deripaud.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/y0zwb/0x4AAAAAAA3OmVPC4MkMilKk/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://r2vk.deripaud.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffd1d9f3855440d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/y0zwb/0x4AAAAAAA3OmVPC4MkMilKk/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/y0zwb/0x4AAAAAAA3OmVPC4MkMilKk/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: r2vk.deripaud.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://r2vk.deripaud.ru/n682ZHUO/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkcxbUdmS2Y4Ym5vdmo3empvU3hvMHc9PSIsInZhbHVlIjoiYVpBWW1qM2lQMG5EczVYYjg4ZzhuWXIwTWsxdjRYWHY2bWVCNENjRGpiOHdGNEpVdmVDNUVZNUR3RzIvRFpkdWhiRnBUTEhhZ09WMVRSbEZmQlZ1amZKZnhuejRmL1RBdVJ0MVZ6UmFxTXgraG5oTDJVVDZSQ2NsQzZrbHZ1UUQiLCJtYWMiOiI5N2ViYjVmY2JjOGE4MmI4NTRmYWIxYjI5NTRhOGVjNGExYjI5YmMxODY4YmRlNGI0YzI0MzhkMjM0NjMzY2EzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlB3Z1Iwc2pQaWNqQnZBUlZFaG5xZHc9PSIsInZhbHVlIjoiYkgyR2RMZlpmdk9HZ2N2Vkk2Y3M5bzNrLzUwUlBlZzUrWHozMzdaK0h5M1QveGZVVldzYk5aUlZOd1EzSjA4T3RlTWJqLzRoWmNKV05nUjdHbzZTR0hFQkFiUmZER3R1SEtJOFozYmlKMThLcmZMU3Q3SXJkdjdhNlQyVVovSVIiLCJtYWMiOiI2MDY3YTgzNTk1ODc5NDQ2MzRhMmMxYmYyODMxMmVkYzY4YmRmZWQwOWMyMDczYjM0YTlmYWQ3NWU4YTIwZWZmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ffd1d9f3855440d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ffd1d9f3855440d/1736516814594/a1bf3eb5fe8bb3c4aa943707e3c1f745b3af1a10f99a350af72509bad976d095/rSIMMmziwxtPxxA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/y0zwb/0x4AAAAAAA3OmVPC4MkMilKk/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1086587883:1736514929:wvygIzfaRYUWUrk2CLbQjb_ENIIxcNvR3svDgzH3DVw/8ffd1d9f3855440d/K7i5FCK57J0e.enRivIDQpV_kLIaVdPU5rtpNyZb2bU-1736516812-1.1.1.1-Yu3k1BFSyH4G0iY.ZeRbQ7ZHKSnZE5Vc30iWJ8E1fNgLrhFeGPiGK7.ibjnNJBZY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ffd1d9f3855440d/1736516814596/CyCR7KBb9cRcVC9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/y0zwb/0x4AAAAAAA3OmVPC4MkMilKk/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ffd1d9f3855440d/1736516814596/CyCR7KBb9cRcVC9 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1086587883:1736514929:wvygIzfaRYUWUrk2CLbQjb_ENIIxcNvR3svDgzH3DVw/8ffd1d9f3855440d/K7i5FCK57J0e.enRivIDQpV_kLIaVdPU5rtpNyZb2bU-1736516812-1.1.1.1-Yu3k1BFSyH4G0iY.ZeRbQ7ZHKSnZE5Vc30iWJ8E1fNgLrhFeGPiGK7.ibjnNJBZY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1086587883:1736514929:wvygIzfaRYUWUrk2CLbQjb_ENIIxcNvR3svDgzH3DVw/8ffd1d9f3855440d/K7i5FCK57J0e.enRivIDQpV_kLIaVdPU5rtpNyZb2bU-1736516812-1.1.1.1-Yu3k1BFSyH4G0iY.ZeRbQ7ZHKSnZE5Vc30iWJ8E1fNgLrhFeGPiGK7.ibjnNJBZY HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mxvqxrmutwfcoianaddrwjgxrKlxzINTZJVZCSXKMJFBKLZIFQFNPWTFUPAAMWNPWNOOOXLWSMPEGWQQNMLAKV HTTP/1.1Host: wrcgowtegwyhaswcyczcyoup1wfxnrz5svvakqq2fkxnouvicqnwbo69kz.ivertoneym.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://r2vk.deripaud.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://r2vk.deripaud.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mxvqxrmutwfcoianaddrwjgxrKlxzINTZJVZCSXKMJFBKLZIFQFNPWTFUPAAMWNPWNOOOXLWSMPEGWQQNMLAKV HTTP/1.1Host: wrcgowtegwyhaswcyczcyoup1wfxnrz5svvakqq2fkxnouvicqnwbo69kz.ivertoneym.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sign.zoho.com
Source: global traffic	DNS traffic detected: DNS query: static.zohocdn.com
Source: global traffic	DNS traffic detected: DNS query: webfonts.zohowebstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: files-accl.zohopublic.com
Source: global traffic	DNS traffic detected: DNS query: r2vk.deripaud.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: wrcgowtegwyhaswcyczcyoup1wfxnrz5svvakqq2fkxnouvicqnwbo69kz.ivertoneym.ru
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /api/v1/guest/actions/439502000000037034/verify HTTP/1.1Host: sign.zoho.comConnection: keep-aliveContent-Length: 233sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://sign.zoho.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zalb_87c72598ae=cc6f7ed99e97eeab00ca49378c2b5819; JSESSIONID=15F85EBD0421BDAF9ED4ED6E79BD1EF5; zscsrfcookie=80fbdd51-22a0-4613-a036-768447233cd8; _zcsr_tmp=80fbdd51-22a0-4613-a036-768447233cd8

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 13:46:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p3Lst%2FQXdNs%2FmoTkq9ZwTEMUTl1eGKKOHiunxkD1qZE%2FxSCOB2hrTTporqwm%2B0VUOlq9ZPLxWcJOK0V4lKCxDRtV60GuHexMlzjH%2FVyG5sAZM5mgz6it9NhPTInJdg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=4873&min_rtt=4869&rtt_var=1834&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2271&delivery_rate=580750&cwnd=251&unsent_bytes=0&cid=5f7c67e7556acdc3&ts=164&x=0"CF-Cache-Status: HITAge: 12950Server: cloudflareCF-RAY: 8ffd1da6481843b9-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1719&min_rtt=1718&rtt_var=646&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1898&delivery_rate=1690793&cwnd=192&unsent_bytes=0&cid=bf328896102bd5f9&ts=3814&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 13:46:55 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: chp9Y2Gp4F8ic/204ORm0A==$94SrOi8bs6vsxg3X9OF1VQ==Server: cloudflareCF-RAY: 8ffd1db3a8534316-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 13:46:58 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: b7wyBTkgacQmMH19D/uqkw==$fByeDACqMEhDoZ1rnbjofg==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ffd1dc66a244358-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 13:47:08 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: VzBqc6JnVakNV+iSeT/59A==$6Qh62nya7u3LYUnKV9/ZgQ==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8ffd1dff28118ce2-EWRalt-svc: h3=":443"; ma=86400

URLs found in memory or binary data

Source: chromecache_135.3.dr	String found in binary or memory: http://ca.mup.gov.rs/download-lat.html
Source: chromecache_135.3.dr	String found in binary or memory: http://ca.mup.gov.rs/download-lat.html.
Source: chromecache_152.3.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_152.3.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_152.3.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_152.3.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_150.3.dr, chromecache_172.3.dr	String found in binary or memory: http://momentjs.com/timezone/docs/#/data-loading/.
Source: chromecache_152.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_152.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_186.3.dr	String found in binary or memory: http://www.brittneymurphydesign.com/
Source: chromecache_186.3.dr	String found in binary or memory: http://www.brittneymurphydesign.com/Sweetly
Source: chromecache_111.3.dr	String found in binary or memory: http://www.graphicdelivery.com/
Source: chromecache_111.3.dr	String found in binary or memory: http://www.graphicdelivery.com/Pretty-PenRegular1.000;UKWN;Pretty-Pen-RegularPretty-Pen-RegularVersi
Source: chromecache_135.3.dr	String found in binary or memory: http://www.nsc.vrm.lt/downloads.htm
Source: chromecache_135.3.dr	String found in binary or memory: http://www.nsc.vrm.lt/downloads.htm.
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xci/
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xdc/
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xfa-connection-set/
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xfa-data/
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xfa-data/1.0/
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xfa-form/
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xfa-locale-set/
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xfa-source-set/
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: http://www.xfa.org/schema/xfa-template/
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12681
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=14222
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_156.3.dr	String found in binary or memory: https://creativemarket.com/alphadesignhttps://creativemarket.com/alphadesignFancy
Source: chromecache_135.3.dr	String found in binary or memory: https://dvv.fi/en/download-card-reader-software
Source: chromecache_190.3.dr, chromecache_135.3.dr	String found in binary or memory: https://dvv.fi/kansalaisvarmenne-kortinlukijaohjelmisto
Source: chromecache_190.3.dr, chromecache_135.3.dr	String found in binary or memory: https://dvv.fi/sv/medborgarcertifikat-kortlasarprogram
Source: chromecache_135.3.dr	String found in binary or memory: https://eid.belgium.be
Source: chromecache_135.3.dr	String found in binary or memory: https://eid.belgium.be.
Source: chromecache_190.3.dr, chromecache_135.3.dr	String found in binary or memory: https://eideasy.com/belgian-id-software-inst
Source: chromecache_135.3.dr	String found in binary or memory: https://eideasy.com/belgian-id-software-installation
Source: chromecache_190.3.dr, chromecache_135.3.dr	String found in binary or memory: https://eideasy.com/belgian-id-software-installation/
Source: chromecache_135.3.dr	String found in binary or memory: https://eideasy.com/how-to-install-token-signing-extension-for-google-chrome/
Source: chromecache_135.3.dr	String found in binary or memory: https://eideasy.com/web-eid-installation-guide
Source: chromecache_152.3.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker/
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/Jarred-Sumner/bun/issues/399
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: https://github.com/denoland/deno/issues/15765
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_152.3.dr	String found in binary or memory: https://github.com/fengyuanchen/cropper
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_135.3.dr	String found in binary or memory: https://github.com/open-eid/chrome-token-signing/releases
Source: chromecache_135.3.dr	String found in binary or memory: https://github.com/open-eid/chrome-token-signing/releases.
Source: chromecache_190.3.dr, chromecache_135.3.dr	String found in binary or memory: https://github.com/szimek/signature_pad
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/tc39/proposal-change-array-by-copy/pull/86
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/tc39/proposal-iterator-helpers
Source: chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/tc39/proposal-json-parse-with-source
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/tc39/proposal-promise-with-resolvers
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/tc39/proposal-set-methods
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/tc39/proposal-set-methods/pull/88
Source: chromecache_152.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/whatwg/url/pull/734
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.37.0/LICENSE
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/679
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/window-object.html#dom-self
Source: chromecache_152.3.dr	String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: chromecache_150.3.dr, chromecache_172.3.dr	String found in binary or memory: https://momentjs.com/timezone/docs/#/use-it/browser/
Source: chromecache_121.3.dr	String found in binary or memory: https://static.localzohocdn.com/forms/images/vBlink.55ce0a81a394d8e64999275619e716d3.gif)
Source: chromecache_168.3.dr	String found in binary or memory: https://static.zohocdn.com/sign/assets/style.38261ba90d463ad171c35ae367ea107f.css
Source: chromecache_168.3.dr	String found in binary or memory: https://static.zohocdn.com/sign/assets/vendor.169a8e414b24f4a6480e50696c4ffaff.css
Source: chromecache_168.3.dr	String found in binary or memory: https://static.zohocdn.com/sign/assets/vendor.91adcec1eab45c3679c369daf3bdf67f.js
Source: chromecache_168.3.dr	String found in binary or memory: https://static.zohocdn.com/sign/fonts/font-styles.ec7bd066b09e33723d05755f854193be.css
Source: chromecache_168.3.dr	String found in binary or memory: https://static.zohocdn.com/sign/images/favicon.0846a82d826c9b9110a4b74674376afc.ico
Source: chromecache_168.3.dr	String found in binary or memory: https://static.zohocdn.com/sign/images/sign-logo.4f94dc244b3a67e8a98ae2c6af38fe1f.png
Source: chromecache_190.3.dr, chromecache_135.3.dr	String found in binary or memory: https://support.certeurope.fr/telechargements/
Source: chromecache_135.3.dr	String found in binary or memory: https://support.certeurope.fr/telechargements/.
Source: chromecache_163.3.dr	String found in binary or memory: https://suresh-3136.csez.zohocorpin
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%iteratorprototype%-
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%iteratorprototype%-object
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%typedarray%.prototype.toreversed
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%typedarray%.prototype.tosorted
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-%typedarray%.prototype.with
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.push
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-createiterresultobject
Source: chromecache_125.3.dr, chromecache_105.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-get-regexp.prototype.flags
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-json.parse
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-newpromisecapability
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getprototypeof
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.setprototypeof
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tobigint
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toindex
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/proposal-arraybuffer-transfer/#sec-arraybuffer.prototype.transfer
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/proposal-arraybuffer-transfer/#sec-arraybuffer.prototype.transfertofixedlength
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/proposal-change-array-by-copy/#sec-%typedarray%.prototype.toReversed
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/proposal-change-array-by-copy/#sec-%typedarray%.prototype.with
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/proposal-change-array-by-copy/#sec-array.prototype.toReversed
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/proposal-change-array-by-copy/#sec-array.prototype.with
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/proposal-iterator-helpers/#sec-getiteratordirect
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.es/proposal-set-methods/#sec-getsetrecord
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.github.io/proposal-set-methods/#Set.prototype.isDisjointFrom
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.github.io/proposal-set-methods/#Set.prototype.isSubsetOf
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://tc39.github.io/proposal-set-methods/#Set.prototype.isSupersetOf
Source: chromecache_125.3.dr, chromecache_105.3.dr, chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://webidl.spec.whatwg.org/#es-DOMException-specialness
Source: chromecache_135.3.dr	String found in binary or memory: https://www.autenticacao.gov.pt/cc-aplicacao
Source: chromecache_135.3.dr	String found in binary or memory: https://www.autenticacao.gov.pt/cc-aplicacao.
Source: chromecache_135.3.dr	String found in binary or memory: https://www.autenticacao.gov.pt/cmd-assinatura
Source: chromecache_190.3.dr, chromecache_135.3.dr	String found in binary or memory: https://www.autenticacao.gov.pt/cmd-assinatura.
Source: chromecache_135.3.dr	String found in binary or memory: https://www.certsign.ro/en/cd/
Source: chromecache_135.3.dr	String found in binary or memory: https://www.certsign.ro/en/cd/.
Source: chromecache_135.3.dr	String found in binary or memory: https://www.eparaksts.lv/en/Downloads
Source: chromecache_135.3.dr	String found in binary or memory: https://www.eparaksts.lv/en/Downloads.
Source: chromecache_190.3.dr, chromecache_135.3.dr	String found in binary or memory: https://www.eparaksts.lv/lv/lejupielades.
Source: chromecache_153.3.dr, chromecache_141.3.dr	String found in binary or memory: https://www.json.org/json-en.html

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 59076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 59082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 59029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 59002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59100
Source: unknown	Network traffic detected: HTTP traffic on port 59104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 59095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59076
Source: unknown	Network traffic detected: HTTP traffic on port 59040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59079
Source: unknown	Network traffic detected: HTTP traffic on port 59034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59073
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59074
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 58955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 59000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 59052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 58961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59082
Source: unknown	Network traffic detected: HTTP traffic on port 59074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59098
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59094
Source: unknown	Network traffic detected: HTTP traffic on port 59080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 59023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 59100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58977
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59037
Source: unknown	Network traffic detected: HTTP traffic on port 59038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59033
Source: unknown	Network traffic detected: HTTP traffic on port 59015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59034
Source: unknown	Network traffic detected: HTTP traffic on port 59044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59030
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59042
Source: unknown	Network traffic detected: HTTP traffic on port 59010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59041
Source: unknown	Network traffic detected: HTTP traffic on port 59106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59054
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59052
Source: unknown	Network traffic detected: HTTP traffic on port 59084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 59107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 59092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59069
Source: unknown	Network traffic detected: HTTP traffic on port 59118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59063
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58939
Source: unknown	Network traffic detected: HTTP traffic on port 59072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59106
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58948
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59118
Source: unknown	Network traffic detected: HTTP traffic on port 59098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59004
Source: unknown	Network traffic detected: HTTP traffic on port 59014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 59083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58957
Source: unknown	Network traffic detected: HTTP traffic on port 59093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59012
Source: unknown	Network traffic detected: HTTP traffic on port 59103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58967
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59018
Source: unknown	Network traffic detected: HTTP traffic on port 59037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58973
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59021
Source: unknown	Network traffic detected: HTTP traffic on port 59043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59023
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59020

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:58991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:59093 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: mal52.win@20/149@50/18

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2188,i,5564455191770057973,17746565586508795163,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sign.zoho.com/zsguest?locale=en&sign_id=234b4d535f4956237c699124bb06f6840075804affff79070f72fbd27ec4885c3a2ba06657b8a52338eb80052baee9f74c4e2e0e7f85c073df939f1ac4dff75f76c95d46ac2361c7b14335e4f12c5c5d49c49b1d2f4c838a&action_type=SIGN"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 --field-trial-handle=2188,i,5564455191770057973,17746565586508795163,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

Drops files with a non-matching file extension (content does not match file extension)

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 137
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 162			Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 137			Jump to dropped file