Play interactive tourEdit tour

Windows Analysis Report
http://url4619.blast.fresha.com/ls/click?upn=u001.G0bnNiVD8tDhPRdNyxjhDe6AC2ZUylxwA-2FPGy7qPBOFCUALhhiYANslkdkKDsOuTa2ZqT7n3N6bFcUrsV3ma3w-3D-3DiLPp_ykKDCurTiMzdScmvRsWtgHw-2Bx-2FsD8gtjZ2QYvaL9rQITVCU8DqQaupyP3UmfqTkykrcOULUqJB8vo6EwGC-2FXTrZZmpb9VysDXh-2Bs9eImE1UjAPhR388ASwoK2AP8BEYSRfU-2BeoIKBzUjh

Overview

General Information

Sample URL:	http://url4619.blast.fresha.com/ls/click?upn=u001.G0bnNiVD8tDhPRdNyxjhDe6AC2ZUylxwA-2FPGy7qPBOFCUALhhiYANslkdkKDsOuTa2ZqT7n3N6bFcUrsV3ma3w-3D-3DiLPp_ykKDCurTiMzdScmvRsWtgHw-2Bx-2FsD8gtjZ2QYvaL9rQITVCU
Analysis ID:	1588127
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected suspicious Javascript

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

Invalid T&C link found

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://recruit.opportunitiesinthreads.com/

Joe Sandbox AI: Score: 8 Reasons: The brand 'Threads' is associated with a well-known social media platform., The URL 'recruit.opportunitiesinthreads.com' does not match the legitimate domain 'threads.com'., The presence of additional words 'opportunitiesin' in the domain is suspicious and often indicative of phishing., The use of a subdomain 'recruit' could be legitimate, but combined with the suspicious main domain, it raises concerns., The input field for 'Email address' is common in phishing attempts to collect user credentials. DOM: 0.1.pages.csv

AI detected suspicious Javascript

Source: 0.3..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://recruit.opportunitiesinthreads.com/assets/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to potentially malicious domains. While some of the functionality may be legitimate (e.g., form validation, error handling), the overall implementation raises significant security concerns. The script appears to be handling sensitive user data and authentication-related actions, which increases the risk of potential misuse or exploitation.

HTML body contains low number of good links

Source: https://recruit.opportunitiesinthreads.com/

HTTP Parser: Number of links: 1

Invalid T&C link found

Source: https://recruit.opportunitiesinthreads.com/	HTTP Parser: Invalid link: Threads Terms
Source: https://recruit.opportunitiesinthreads.com/	HTTP Parser: Invalid link: Privacy Policy

HTML page is missing a favicon

Source: https://recruit.opportunitiesinthreads.com/

HTTP Parser: No favicon

Networking

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.4:57081 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:54159 -> 1.1.1.1:53

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET //assets/css/main.css HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET //assets/css/jquery.select.css HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET //assets/css/home.module.css HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //assets/js/socket.io.js HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET //assets/js/jquery.select.min.js HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /boxicons@2.1.4/css/boxicons.min.css HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/bg.webp HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /assets/img/facebook.png HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET //assets/js/jquery.select.min.js HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /assets/js/main.js?v=11 HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET //assets/js/socket.io.js HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /assets/img/facebook.png HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /assets/js/main.js?v=11 HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqLLS HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=P01fHWdKJhDaRXAAAABp HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: JSedLXleUUc6KlsCO0a4Og==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqLhG&sid=P01fHWdKJhDaRXAAAABp HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqLLS HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/img/bg.webp HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET //assets/images/threadsfavicon.png HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqLxm&sid=P01fHWdKJhDaRXAAAABp HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqLhE&sid=P01fHWdKJhDaRXAAAABp HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqLhG&sid=P01fHWdKJhDaRXAAAABp HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //assets/images/threadsfavicon.png HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqLxm&sid=P01fHWdKJhDaRXAAAABp HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqMZw HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=qLB5fG-cCh_s2j9gAABs HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: jyrk2E1LtYtQyG9GAHQATw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqMrO&sid=qLB5fG-cCh_s2j9gAABs HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqMZw HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqN5O&sid=qLB5fG-cCh_s2j9gAABs HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqMrM&sid=qLB5fG-cCh_s2j9gAABs HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqMrO&sid=qLB5fG-cCh_s2j9gAABs HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqN5O&sid=qLB5fG-cCh_s2j9gAABs HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqNdx HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=QDkSM5reT4vysVQjAABw HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: N/TstCkIjS089jrLBu3pGA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqNwF&sid=QDkSM5reT4vysVQjAABw HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqNdx HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqOD9&sid=QDkSM5reT4vysVQjAABw HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqNwE&sid=QDkSM5reT4vysVQjAABw HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqNwF&sid=QDkSM5reT4vysVQjAABw HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqOD9&sid=QDkSM5reT4vysVQjAABw HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqOlF HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=HaibIylBodwGwBq3AAB0 HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: yVinXt4cPZeYfJHESHmsxw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqOlF HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqP0V&sid=HaibIylBodwGwBq3AAB0 HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqPGW&sid=HaibIylBodwGwBq3AAB0 HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqP0T&sid=HaibIylBodwGwBq3AAB0 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqP0V&sid=HaibIylBodwGwBq3AAB0 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqPlz HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=WgWC17JyiOXMggXbAAB3 HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: oP75EjVcC8Qdmq5bOeKI0w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqQ1o&sid=WgWC17JyiOXMggXbAAB3 HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqPlz HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqQL0&sid=WgWC17JyiOXMggXbAAB3 HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqQ1m&sid=WgWC17JyiOXMggXbAAB3 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqQ1o&sid=WgWC17JyiOXMggXbAAB3 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqQL0&sid=WgWC17JyiOXMggXbAAB3 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqQkC HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=Qx4V40uehqt24LHZAAB6 HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: geLW+jEnR9lIMRrEzHeBmA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqQkC HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqR1H&sid=Qx4V40uehqt24LHZAAB6 HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqRHd&sid=Qx4V40uehqt24LHZAAB6 HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqR1F&sid=Qx4V40uehqt24LHZAAB6 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqR1H&sid=Qx4V40uehqt24LHZAAB6 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqRqH HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=XjvYMzFvYLuKsRQrAAB9 HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 2pOzRxedIn1xpgKF/5kLDw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqRqH HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqS4H&sid=XjvYMzFvYLuKsRQrAAB9 HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqSMR&sid=XjvYMzFvYLuKsRQrAAB9 HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqS4H&sid=XjvYMzFvYLuKsRQrAAB9 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqS4F&sid=XjvYMzFvYLuKsRQrAAB9 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqSMR&sid=XjvYMzFvYLuKsRQrAAB9 HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqSz_ HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=Euc7wr9oHGeiNa3qAACA HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 3JtXm5E2600sBGTY7pIjXg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqSz_ HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqTFo&sid=Euc7wr9oHGeiNa3qAACA HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqTdF&sid=Euc7wr9oHGeiNa3qAACA HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqTFm&sid=Euc7wr9oHGeiNa3qAACA HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqTFo&sid=Euc7wr9oHGeiNa3qAACA HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqTdF&sid=Euc7wr9oHGeiNa3qAACA HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqUAB HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqUAB HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=vQlTSXu5H09i6nnEAACD HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: WFGjL4VaHUmUx8j+VGglxw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqURL&sid=vQlTSXu5H09i6nnEAACD HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqUiE&sid=vQlTSXu5H09i6nnEAACD HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqURJ&sid=vQlTSXu5H09i6nnEAACD HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqURL&sid=vQlTSXu5H09i6nnEAACD HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqUiE&sid=vQlTSXu5H09i6nnEAACD HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqVIC HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqVIC HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqVaK&sid=USGl5norvrDY0JhTAACG HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=USGl5norvrDY0JhTAACG HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 9r3uKVe31Ks1AaOWV1WU/w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqVxg&sid=USGl5norvrDY0JhTAACG HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqVaJ&sid=USGl5norvrDY0JhTAACG HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqVaK&sid=USGl5norvrDY0JhTAACG HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqVxg&sid=USGl5norvrDY0JhTAACG HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqWtm HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqWtm HTTP/1.1Host: maximescommands.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=polling&t=PHHqXLt&sid=lSg_1pqhMhFO_y67AACL HTTP/1.1Host: maximescommands.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://recruit.opportunitiesinthreads.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://recruit.opportunitiesinthreads.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /socket.io/?room=9brlc6hb3t62hnrk8fjq0tigmv&message=*IP%3A%208.46.123.189%0ACountry%3A%20US%0ACity%3A%20New%20York%0ARegion%3A%20New%20York%0A&chatId=-4623327651&token=7719905101%3AAAHDKH0fM9fGNh8gFYtuJy13mCZLy_SQmGQ&EIO=4&transport=websocket&sid=lSg_1pqhMhFO_y67AACL HTTP/1.1Host: maximescommands.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://recruit.opportunitiesinthreads.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 8PvFP74OsueIca2QRUiImw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /gw.php HTTP/1.1Host: recruit.opportunitiesinthreads.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=9brlc6hb3t62hnrk8fjq0tigmv
Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.G0bnNiVD8tDhPRdNyxjhDe6AC2ZUylxwA-2FPGy7qPBOFCUALhhiYANslkdkKDsOuTa2ZqT7n3N6bFcUrsV3ma3w-3D-3DiLPp_ykKDCurTiMzdScmvRsWtgHw-2Bx-2FsD8gtjZ2QYvaL9rQITVCU8DqQaupyP3UmfqTkykrcOULUqJB8vo6EwGC-2FXTrZZmpb9VysDXh-2Bs9eImE1UjAPhR388ASwoK2AP8BEYSRfU-2BeoIKBzUjhDstghksAsPKSpvEGafa0WwVUEqkryumMEQR7LzeuVihS6omMjDxWLWVMpRaOOynXHENqj69QJe59g4iFPytRm60mTk5xjXMgeEaRzFxoPJ4ml3mi0VzHAqUdjS3jfMBnOzPxHyb77YZzptZnuj5FOqVfelcRKxyeSqvYRwMU4ICLhbfcggUpY9RSJQ7f8uHQHGk5X2Upw-3D-3D HTTP/1.1Host: url4619.blast.fresha.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url4619.blast.fresha.com
Source: global traffic	DNS traffic detected: DNS query: recruit.opportunitiesinthreads.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: maximescommands.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /report/v4?s=RdIDLO%2BPPacBSaxEEwr5e8tQ6oXVuj9AKzqo%2BmDW4AvpAOUoDBu9w2rOAzbBTVkj6r09d0ycDe8hd360F51ETtCganE%2FhfqQQiVN57wX4MvADpov%2FYZJc5lDYu1DWeizRw0eIaGim6OFbN6zrb5qhQQoB3Cc HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 405Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 20:04:05 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uXkvkhlS6sRCZh9RYBfoh0FtrLrLUbW0bxDGpNU0FP2ZZMFy2vpkkwS7ltn1wygYbmpqQbn0s%2Fmsm0SmCOX0MOfhXJ2sM%2Fw%2BSmxQUvdnPds%2Bu5VwIvQ2bE42XjZJutw9KHznqQ20q6006P5T%2B13MACPm4Mes"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8fff462ac92941a9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1664&min_rtt=1659&rtt_var=633&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2871&recv_bytes=1248&delivery_rate=1714621&cwnd=209&unsent_bytes=0&cid=e5131c612655b37e&ts=1113&x=0"

URLs found in memory or binary data

Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://caniuse.com/url
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/URL
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/WebSocket/send
Source: chromecache_124.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:ital
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_134.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://github.com/component/has-cors
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://github.com/galkn/parseuri
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://github.com/galkn/querystring
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://github.com/socketio/engine.io-client/commit/de2c561e4564efeb78f1bdb1ba39ef81b2822cb3
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://github.com/socketio/engine.io-client/commit/df32277c3f6d622eec5ed09f493cae3f3391d242
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://github.com/socketio/socket.io-client/commit/4ee1d5d94b3906a9c052b459f1a818b15f38f91c
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://github.com/unshiftio/yeast
Source: chromecache_111.2.dr, chromecache_136.2.dr	String found in binary or memory: https://maximescommands.com/
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://nodejs.org/api/events.html#events_event_newlistener
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://socket.io/docs/v3/migrating-from-2-x-to-3-0/)
Source: chromecache_123.2.dr, chromecache_114.2.dr	String found in binary or memory: https://www.rfc-editor.org/rfc/rfc3986#appendix-B

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 57141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 54282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57135
Source: unknown	Network traffic detected: HTTP traffic on port 54224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57132
Source: unknown	Network traffic detected: HTTP traffic on port 54218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54307
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54302
Source: unknown	Network traffic detected: HTTP traffic on port 57089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57141
Source: unknown	Network traffic detected: HTTP traffic on port 57135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54313
Source: unknown	Network traffic detected: HTTP traffic on port 54185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54312
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54315
Source: unknown	Network traffic detected: HTTP traffic on port 54200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54314
Source: unknown	Network traffic detected: HTTP traffic on port 54191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57152
Source: unknown	Network traffic detected: HTTP traffic on port 54275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54208
Source: unknown	Network traffic detected: HTTP traffic on port 57169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57167
Source: unknown	Network traffic detected: HTTP traffic on port 54355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57165
Source: unknown	Network traffic detected: HTTP traffic on port 54196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54178
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54187
Source: unknown	Network traffic detected: HTTP traffic on port 54228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54185
Source: unknown	Network traffic detected: HTTP traffic on port 54363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54180
Source: unknown	Network traffic detected: HTTP traffic on port 54197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54189
Source: unknown	Network traffic detected: HTTP traffic on port 54202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54194
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54193
Source: unknown	Network traffic detected: HTTP traffic on port 54223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54192
Source: unknown	Network traffic detected: HTTP traffic on port 54357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54199
Source: unknown	Network traffic detected: HTTP traffic on port 54163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54196
Source: unknown	Network traffic detected: HTTP traffic on port 54217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54190
Source: unknown	Network traffic detected: HTTP traffic on port 54213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57109
Source: unknown	Network traffic detected: HTTP traffic on port 54207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57119
Source: unknown	Network traffic detected: HTTP traffic on port 54373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57115
Source: unknown	Network traffic detected: HTTP traffic on port 54186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 54328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 54209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54376
Source: unknown	Network traffic detected: HTTP traffic on port 54187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54382
Source: unknown	Network traffic detected: HTTP traffic on port 54164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54262
Source: unknown	Network traffic detected: HTTP traffic on port 54273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57091
Source: unknown	Network traffic detected: HTTP traffic on port 54262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54389
Source: unknown	Network traffic detected: HTTP traffic on port 54336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54392
Source: unknown	Network traffic detected: HTTP traffic on port 54227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54394
Source: unknown	Network traffic detected: HTTP traffic on port 54399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54399
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54398
Source: unknown	Network traffic detected: HTTP traffic on port 54203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54284
Source: unknown	Network traffic detected: HTTP traffic on port 54302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54169
Source: unknown	Network traffic detected: HTTP traffic on port 54182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54167
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54170
Source: unknown	Network traffic detected: HTTP traffic on port 54165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54295
Source: unknown	Network traffic detected: HTTP traffic on port 54171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54290
Source: unknown	Network traffic detected: HTTP traffic on port 57133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54219
Source: unknown	Network traffic detected: HTTP traffic on port 54160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54214
Source: unknown	Network traffic detected: HTTP traffic on port 54314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54213
Source: unknown	Network traffic detected: HTTP traffic on port 54183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54212
Source: unknown	Network traffic detected: HTTP traffic on port 54337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54220
Source: unknown	Network traffic detected: HTTP traffic on port 54254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54225
Source: unknown	Network traffic detected: HTTP traffic on port 54220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54229
Source: unknown	Network traffic detected: HTTP traffic on port 54354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54349
Source: unknown	Network traffic detected: HTTP traffic on port 54188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54232
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54230
Source: unknown	Network traffic detected: HTTP traffic on port 54248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54238
Source: unknown	Network traffic detected: HTTP traffic on port 54189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54237
Source: unknown	Network traffic detected: HTTP traffic on port 54226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54361
Source: unknown	Network traffic detected: HTTP traffic on port 54365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54247
Source: unknown	Network traffic detected: HTTP traffic on port 54161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54246
Source: unknown	Network traffic detected: HTTP traffic on port 57109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54365
Source: unknown	Network traffic detected: HTTP traffic on port 54204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57089
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57083
Source: unknown	Network traffic detected: HTTP traffic on port 54232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57084
Source: unknown	Network traffic detected: HTTP traffic on port 54215 -> 443

System Summary

Classification label

Source: classification engine

Classification label: mal52.phis.win@22/54@22/10

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2016,i,2806545423649828544,4855426724033578004,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://url4619.blast.fresha.com/ls/click?upn=u001.G0bnNiVD8tDhPRdNyxjhDe6AC2ZUylxwA-2FPGy7qPBOFCUALhhiYANslkdkKDsOuTa2ZqT7n3N6bFcUrsV3ma3w-3D-3DiLPp_ykKDCurTiMzdScmvRsWtgHw-2Bx-2FsD8gtjZ2QYvaL9rQITVCU8DqQaupyP3UmfqTkykrcOULUqJB8vo6EwGC-2FXTrZZmpb9VysDXh-2Bs9eImE1UjAPhR388ASwoK2AP8BEYSRfU-2BeoIKBzUjhDstghksAsPKSpvEGafa0WwVUEqkryumMEQR7LzeuVihS6omMjDxWLWVMpRaOOynXHENqj69QJe59g4iFPytRm60mTk5xjXMgeEaRzFxoPJ4ml3mi0VzHAqUdjS3jfMBnOzPxHyb77YZzptZnuj5FOqVfelcRKxyeSqvYRwMU4ICLhbfcggUpY9RSJQ7f8uHQHGk5X2Upw-3D-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=2016,i,2806545423649828544,4855426724033578004,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected