Play interactive tourEdit tour

Windows Analysis Report
https://google.com.vn/url?q=IEQBZO82U018ETYNCV6WTYH64K0BD9FgQiApLjODz3yh4nNeW8uuQi&rct=152c27645d86ba0833d5001d33047642wDnNeW8yycT&sa=t&esrc=nTgV8F152c27645d86ba0833d5001d33047642A0xys8Em2FL&source=&cd=tS6T8152c27645d86ba0833d5001d33047642Tiw9XH&cad=JxWzDfBP152c27645d86ba0833d5001d33047642VS0Y&ved=x

Overview

General Information

Sample URL:	https://google.com.vn/url?q=IEQBZO82U018ETYNCV6WTYH64K0BD9FgQiApLjODz3yh4nNeW8uuQi&rct=152c27645d86ba0833d5001d33047642wDnNeW8yycT&sa=t&esrc=nTgV8F152c27645d86ba0833d5001d33047642A0xys8Em2FL&source=&c
Analysis ID:	1592196
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

AI detected suspicious Javascript

Detected hidden input values containing email addresses (often used in phishing pages)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains obfuscated script src

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Cryptography

Public key (encryption) found

Source: chromecache_132.2.dr

Binary or memory string: const PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----

memstr_d12d7352-c

Phishing

AI detected phishing page

Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'autolumaled.com' does not match the legitimate domain for Microsoft., The URL does not contain any recognizable association with Microsoft, which is suspicious., The presence of an input field for 'Enter password' on a non-Microsoft domain is a common phishing tactic. DOM: 4.7.pages.csv

Source: https://autolumaled.com/common/login

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'autolumaled.com' does not match the legitimate domain for Microsoft., The URL does not contain any recognizable association with Microsoft, which is suspicious., The presence of an input field for entering a password on a non-Microsoft domain is a common phishing tactic. DOM: 5.10.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 1.4.id.script.csv, type: HTML
Source: Yara match	File source: 1.26.i.script.csv, type: HTML
Source: Yara match	File source: 1.31.id.script.csv, type: HTML
Source: Yara match	File source: 1.30.id.script.csv, type: HTML
Source: Yara match	File source: 1.28.id.script.csv, type: HTML
Source: Yara match	File source: 1.9.id.script.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 5.21.pages.csv, type: HTML
Source: Yara match	File source: 5.14.pages.csv, type: HTML
Source: Yara match	File source: 4.5.pages.csv, type: HTML
Source: Yara match	File source: 4.7.pages.csv, type: HTML
Source: Yara match	File source: 5.10.pages.csv, type: HTML
Source: Yara match	File source: 5.16.pages.csv, type: HTML
Source: Yara match	File source: 5.19.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.13.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2d... This script demonstrates several high-risk behaviors, including data exfiltration and potential redirection to an untrusted domain. The script checks if it is running in an iframe and, if not allowed, attempts to redirect the top-level window to a URL containing an 'iframe-request-id' parameter. This behavior could be used for phishing or other malicious purposes, and the use of obfuscated code and unknown domains increases the risk.

Detected hidden input values containing email addresses (often used in phishing pages)

Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true

HTTP Parser: misty.alnahaoi@texanacenter.com

HTML body contains low number of good links

Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true

HTTP Parser: Number of links: 0

Source: https://autolumaled.com/common/login

HTTP Parser: Number of links: 0

HTML page contains hidden javascript code

Source: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/?qrc=bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ==

HTTP Parser: Base64 decoded: misty.alnahaoi@texanacenter.com

HTML page contains obfuscated script src

Source: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJ	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJ	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJ	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://autolumaled.com/common/login	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://autolumaled.com/common/login	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://autolumaled.com/common/login	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://autolumaled.com/common/login	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://autolumaled.com/common/login	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX

Found iframes

Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://autolumaled.com/common/login	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://autolumaled.com/common/login	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://autolumaled.com/common/login	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://autolumaled.com/common/login	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx
Source: https://autolumaled.com/common/login	HTTP Parser: Iframe src: https://outlook.office365.com/owa/prefetch.aspx

HTML body contains password input

Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://autolumaled.com/common/login

HTTP Parser: <input type="password" .../> found

HTML page is missing a favicon

Source: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/?qrc=bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ==	HTTP Parser: No favicon
Source: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/?qrc=bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ==	HTTP Parser: No favicon
Source: https://autolumaled.com/?2ryn4nn79=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	HTTP Parser: No favicon
Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true	HTTP Parser: No favicon
Source: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1taXN0eS5hbG5haGFvaSU0MHRleGFuYWNlbnRlci5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjE0Y2EyYzMtN2Y5YS0zOGJkLWUyMGItMjM1OWM4NWIwN2EwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODcyNTczMjkxODY3OTU0My44MGRkNGMzOS1mYjQyLTQ4MjQtOTQ2MS1kNjFlMTA0ZTA2ZTUmc3RhdGU9RGN0SkRnSWhFRUJSMExPNGhHWW9wb1h4S0thRTBpYnBocVFsVVc4dmlfZDNuelBHenROcDRtcUdCVzlqTUM1WWszVDBJVG13TXFwU0lOc2tuZzh3QXFJQmtjQnJVYndtcllDVUo4Zm5hNWItd2VXMjlWZHQ5N1cyY2QzcmVfd2tiZzFYN1BVQ2F0QVhHMlpxZ3c2Wi1fNEg=&sso_reload=true	HTTP Parser: No favicon
Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true	HTTP Parser: No favicon
Source: https://autolumaled.com/common/login	HTTP Parser: No favicon
Source: https://autolumaled.com/common/login	HTTP Parser: No favicon
Source: https://autolumaled.com/common/login	HTTP Parser: No favicon
Source: https://autolumaled.com/common/login	HTTP Parser: No favicon
Source: https://autolumaled.com/common/login	HTTP Parser: No favicon
Source: https://autolumaled.com/common/login	HTTP Parser: No favicon
Source: https://autolumaled.com/common/login	HTTP Parser: No favicon

META author tag missing

Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="author".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="author".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="author".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="author".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://autolumaled.com/?2ryn4nn79=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&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="copyright".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="copyright".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="copyright".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="copyright".. found
Source: https://autolumaled.com/common/login	HTTP Parser: No <meta name="copyright".. found

Compliance

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49745 version: TLS 1.0

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2057301 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07 : 104.21.96.135:443 -> 192.168.2.5:49721
Source: Network traffic	Suricata IDS: 2057301 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07 : 104.21.96.135:443 -> 192.168.2.5:49722
Source: Network traffic	Suricata IDS: 2057301 - Severity 1 - ET PHISHING Generic Credential Phish Landing Page with Explicit Cloudflare Turnstile Rendering 2024-11-07 : 172.67.181.160:443 -> 192.168.2.5:49752
Source: Network traffic	Suricata IDS: 2832046 - Severity 1 - ETPRO PHISHING Successful Office 365 Phish 2018-08-01 : 192.168.2.5:56321 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2832180 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2018-08-15 : 192.168.2.5:56321 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2840426 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2020-01-14 : 192.168.2.5:56321 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2846045 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2020-12-15 : 192.168.2.5:56321 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2832046 - Severity 1 - ETPRO PHISHING Successful Office 365 Phish 2018-08-01 : 192.168.2.5:56412 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2832180 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2018-08-15 : 192.168.2.5:56412 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2840426 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2020-01-14 : 192.168.2.5:56412 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2846045 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2020-12-15 : 192.168.2.5:56412 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2832046 - Severity 1 - ETPRO PHISHING Successful Office 365 Phish 2018-08-01 : 192.168.2.5:56440 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2832180 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2018-08-15 : 192.168.2.5:56440 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2840426 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2020-01-14 : 192.168.2.5:56440 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2846045 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2020-12-15 : 192.168.2.5:56440 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2832046 - Severity 1 - ETPRO PHISHING Successful Office 365 Phish 2018-08-01 : 192.168.2.5:56453 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2832180 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2018-08-15 : 192.168.2.5:56453 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2840426 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2020-01-14 : 192.168.2.5:56453 -> 192.241.142.4:443
Source: Network traffic	Suricata IDS: 2846045 - Severity 1 - ETPRO PHISHING Successful Microsoft Account Phish 2020-12-15 : 192.168.2.5:56453 -> 192.241.142.4:443

Detected non-DNS traffic on DNS port

Source: global traffic	TCP traffic: 192.168.2.5:56273 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:58130 -> 162.159.36.2:53

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: www.google.com.vn to http://sexado.nl/helosuns/152c27645d86ba0833d5001d33047642/bwlzdhkuywxuywhhb2ladgv4yw5hy2vudgvylmnvbq==

Uses insecure TLS / SSL version for HTTPS connection

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49745 version: TLS 1.0

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /url?q=IEQBZO82U018ETYNCV6WTYH64K0BD9FgQiApLjODz3yh4nNeW8uuQi&rct=152c27645d86ba0833d5001d33047642wDnNeW8yycT&sa=t&esrc=nTgV8F152c27645d86ba0833d5001d33047642A0xys8Em2FL&source=&cd=tS6T8152c27645d86ba0833d5001d33047642Tiw9XH&cad=JxWzDfBP152c27645d86ba0833d5001d33047642VS0Y&ved=xjnktlqryYWwVTDrgvK&uact=&url=amp%2Fsexado.nl/helosuns/152c27645d86ba0833d5001d33047642/bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ== HTTP/1.1Host: google.com.vnConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?q=IEQBZO82U018ETYNCV6WTYH64K0BD9FgQiApLjODz3yh4nNeW8uuQi&rct=152c27645d86ba0833d5001d33047642wDnNeW8yycT&sa=t&esrc=nTgV8F152c27645d86ba0833d5001d33047642A0xys8Em2FL&source=&cd=tS6T8152c27645d86ba0833d5001d33047642Tiw9XH&cad=JxWzDfBP152c27645d86ba0833d5001d33047642VS0Y&ved=xjnktlqryYWwVTDrgvK&uact=&url=amp%2Fsexado.nl/helosuns/152c27645d86ba0833d5001d33047642/bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ== HTTP/1.1Host: www.google.com.vnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /amp/sexado.nl/helosuns/152c27645d86ba0833d5001d33047642/bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ== HTTP/1.1Host: www.google.com.vnConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=MI7ONpmWqnhBwiMRVklPmmItRIgK2COpnSrBnl_ADhC6mN8R-krXLRUSN01O5DxVHnSMY4apYN6T9RFsHiK4dXzU6QbOqvmMssDu01BlsdHJkyX7v3uJDVZser4wtJEhzNWlBBGoGKYg4dPhWXdUNkd-ZBW3v_0QR_9if5lyK-GYXGg3B7v_SM2NV1bxVP4PHG8BtFVqed_toQ
Source: global traffic	HTTP traffic detected: GET /?qrc=bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ== HTTP/1.1Host: 3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://sexado.nl/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e0c90b6a3ed1/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/uldsu/0x4AAAAAAA5Vi5ptLVedHwH9/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9028f3f06abdc33b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/uldsu/0x4AAAAAAA5Vi5ptLVedHwH9/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/uldsu/0x4AAAAAAA5Vi5ptLVedHwH9/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/?qrc=bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9028f3f06abdc33b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/967256325:1736972940:BULGYH6RHzVIeaHAiHpyt2EoH7NHlMzwQO4DhukKvUE/9028f3f06abdc33b/KnBGlt8HEnyA649jE8Pe0fKpyo281NvO_3VoxTne_h4-1736976478-1.1.1.1-f.izfE6pZY2hU7N6H7sr3HXZZRKDJVyf91EOpV8kdpcCn.xDlXDq0EH5YW3hbJqT HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/9028f3f06abdc33b/1736976480460/D4rXjCrEfhUWdqW HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/uldsu/0x4AAAAAAA5Vi5ptLVedHwH9/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/9028f3f06abdc33b/1736976480460/D4rXjCrEfhUWdqW HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9028f3f06abdc33b/1736976480462/b827703ed55b284dc09ddb3dc7f3c14c07a85ee41ffcb3de22aec3d5f236e9a4/GL8y71WBiR3SQNr HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/uldsu/0x4AAAAAAA5Vi5ptLVedHwH9/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/967256325:1736972940:BULGYH6RHzVIeaHAiHpyt2EoH7NHlMzwQO4DhukKvUE/9028f3f06abdc33b/KnBGlt8HEnyA649jE8Pe0fKpyo281NvO_3VoxTne_h4-1736976478-1.1.1.1-f.izfE6pZY2hU7N6H7sr3HXZZRKDJVyf91EOpV8kdpcCn.xDlXDq0EH5YW3hbJqT HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/967256325:1736972940:BULGYH6RHzVIeaHAiHpyt2EoH7NHlMzwQO4DhukKvUE/9028f3f06abdc33b/KnBGlt8HEnyA649jE8Pe0fKpyo281NvO_3VoxTne_h4-1736976478-1.1.1.1-f.izfE6pZY2hU7N6H7sr3HXZZRKDJVyf91EOpV8kdpcCn.xDlXDq0EH5YW3hbJqT HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?eawkysbj&qrc=bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ== HTTP/1.1Host: aspac-alrcargo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonqrc-auth: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2F1dG9sdW1hbGVkLmNvbS8iLCJkb21haW4iOiJhdXRvbHVtYWxlZC5jb20iLCJrZXkiOiJxR2JWcEtHcFRieksiLCJxcmMiOiJtaXN0eS5hbG5haGFvaUB0ZXhhbmFjZW50ZXIuY29tIiwiaWF0IjoxNzM2OTc2NDkwLCJleHAiOjE3MzY5NzY2MTB9.61tExVTKbIkGmfl6-WYNbB_rUJyrGsqMiPjqd4HZs9o HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?qrc=misty.alnahaoi%40texanacenter.com HTTP/1.1Host: autolumaled.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=qGbVpKGpTbzK; qPdM.sig=63h31wnDQGyDVeMeW6lpr7gcXbM
Source: global traffic	HTTP traffic detected: GET /?eawkysbj&qrc=bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ== HTTP/1.1Host: aspac-alrcargo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /owa/?login_hint=misty.alnahaoi%40texanacenter.com HTTP/1.1Host: autolumaled.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=qGbVpKGpTbzK; qPdM.sig=63h31wnDQGyDVeMeW6lpr7gcXbM
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2F1dG9sdW1hbGVkLmNvbS8iLCJkb21haW4iOiJhdXRvbHVtYWxlZC5jb20iLCJrZXkiOiJsT2YyUTdwdVFSZ2QiLCJxcmMiOiJtaXN0eS5hbG5haGFvaUB0ZXhhbmFjZW50ZXIuY29tIiwiaWF0IjoxNzM2OTc2NDkxLCJleHAiOjE3MzY5NzY2MTF9.G_7TlFFStWJv0MhGtLiPIDb7kJwmTCErYNkyPiVCwek HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=qGbVpKGpTbzK; qPdM.sig=63h31wnDQGyDVeMeW6lpr7gcXbM
Source: global traffic	HTTP traffic detected: GET /?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1taXN0eS5hbG5haGFvaSU0MHRleGFuYWNlbnRlci5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjE0Y2EyYzMtN2Y5YS0zOGJkLWUyMGItMjM1OWM4NWIwN2EwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODcyNTczMjkxODY3OTU0My44MGRkNGMzOS1mYjQyLTQ4MjQtOTQ2MS1kNjFlMTA0ZTA2ZTUmc3RhdGU9RGN0SkRnSWhFRUJSMExPNGhHWW9wb1h4S0thRTBpYnBocVFsVVc4dmlfZDNuelBHenROcDRtcUdCVzlqTUM1WWszVDBJVG13TXFwU0lOc2tuZzh3QXFJQmtjQnJVYndtcllDVUo4Zm5hNWItd2VXMjlWZHQ5N1cyY2QzcmVfd2tiZzFYN1BVQ2F0QVhHMlpxZ3c2Wi1fNEg= HTTP/1.1Host: autolumaled.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=qGbVpKGpTbzK; qPdM.sig=63h31wnDQGyDVeMeW6lpr7gcXbM; ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; X-OWA-RedirectHistory=ArLym14B99eEg6s13Qg
Source: global traffic	HTTP traffic detected: GET /?qrc=misty.alnahaoi%40texanacenter.com HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; X-OWA-RedirectHistory=ArLym14B99eEg6s13Qg; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1taXN0eS5hbG5haGFvaSU0MHRleGFuYWNlbnRlci5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjE0Y2EyYzMtN2Y5YS0zOGJkLWUyMGItMjM1OWM4NWIwN2EwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODcyNTczMjkxODY3OTU0My44MGRkNGMzOS1mYjQyLTQ4MjQtOTQ2MS1kNjFlMTA0ZTA2ZTUmc3RhdGU9RGN0SkRnSWhFRUJSMExPNGhHWW9wb1h4S0thRTBpYnBocVFsVVc4dmlfZDNuelBHenROcDRtcUdCVzlqTUM1WWszVDBJVG13TXFwU0lOc2tuZzh3QXFJQmtjQnJVYndtcllDVUo4Zm5hNWItd2VXMjlWZHQ5N1cyY2QzcmVfd2tiZzFYN1BVQ2F0QVhHMlpxZ3c2Wi1fNEg=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; X-OWA-RedirectHistory=ArLym14B99eEg6s13Qg; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; fpc=Av0HcaHWWqBAnpN9LY30YTY; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEO1LZ9SvRelHFG_PGWcGkf8_dmW7Gnq_tIQK2RjGyPMyNfd9zZYdrv4cYyfAIoBXNRdcgpXEyJzluVpwr2kZxZMG_G9JRLXccd814QUa31M4u5IlUYgbWcHyxTGjimkjW3VdCSnx-CgN5ehXAlOKcOXLLuzmu1z_d-1xJRkS4VwogAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /owa/?login_hint=misty.alnahaoi%40texanacenter.com HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; X-OWA-RedirectHistory=ArLym14B99eEg6s13Qg; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; fpc=Av0HcaHWWqBAnpN9LY30YTY; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEO1LZ9SvRelHFG_PGWcGkf8_dmW7Gnq_tIQK2RjGyPMyNfd9zZYdrv4cYyfAIoBXNRdcgpXEyJzluVpwr2kZxZMG_G9JRLXccd814QUa31M4u5IlUYgbWcHyxTGjimkjW3VdCSnx-CgN5ehXAlOKcOXLLuzmu1z_d-1xJRkS4VwogAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /?2ryn4nn79=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 HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; fpc=Av0HcaHWWqBAnpN9LY30YTY; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEO1LZ9SvRelHFG_PGWcGkf8_dmW7Gnq_tIQK2RjGyPMyNfd9zZYdrv4cYyfAIoBXNRdcgpXEyJzluVpwr2kZxZMG_G9JRLXccd814QUa31M4u5IlUYgbWcHyxTGjimkjW3VdCSnx-CgN5ehXAlOKcOXLLuzmu1z_d-1xJRkS4VwogAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; fpc=Av0HcaHWWqBAnpN9LY30YTY; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEO1LZ9SvRelHFG_PGWcGkf8_dmW7Gnq_tIQK2RjGyPMyNfd9zZYdrv4cYyfAIoBXNRdcgpXEyJzluVpwr2kZxZMG_G9JRLXccd814QUa31M4u5IlUYgbWcHyxTGjimkjW3VdCSnx-CgN5ehXAlOKcOXLLuzmu1z_d-1xJRkS4VwogAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg
Source: global traffic	HTTP traffic detected: GET /?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1taXN0eS5hbG5haGFvaSU0MHRleGFuYWNlbnRlci5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjE0Y2EyYzMtN2Y5YS0zOGJkLWUyMGItMjM1OWM4NWIwN2EwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODcyNTczMjkxODY3OTU0My44MGRkNGMzOS1mYjQyLTQ4MjQtOTQ2MS1kNjFlMTA0ZTA2ZTUmc3RhdGU9RGN0SkRnSWhFRUJSMExPNGhHWW9wb1h4S0thRTBpYnBocVFsVVc4dmlfZDNuelBHenROcDRtcUdCVzlqTUM1WWszVDBJVG13TXFwU0lOc2tuZzh3QXFJQmtjQnJVYndtcllDVUo4Zm5hNWItd2VXMjlWZHQ5N1cyY2QzcmVfd2tiZzFYN1BVQ2F0QVhHMlpxZ3c2Wi1fNEg=&sso_reload=true HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://autolumaled.com/?2ryn4nn79=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Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FG
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://autolumaled.com/?2ryn4nn79=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Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; fpc=Av0HcaHWWqBAnpN9LY30YTY; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEO1LZ9SvRelHFG_PGWcGkf8_dmW7Gnq_tIQK2RjGyPMyNfd9zZYdrv4cYyfAIoBXNRdcgpXEyJzluVpwr2kZxZMG_G9JRLXccd814QUa31M4u5IlUYgbWcHyxTGjimkjW3VdCSnx-CgN5ehXAlOKcOXLLuzmu1z_d-1xJRkS4VwogAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRa
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1taXN0eS5hbG5haGFvaSU0MHRleGFuYWNlbnRlci5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjE0Y2EyYzMtN2Y5YS0zOGJkLWUyMGItMjM1OWM4NWIwN2EwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODcyNTczMjkxODY3OTU0My44MGRkNGMzOS1mYjQyLTQ4MjQtOTQ2MS1kNjFlMTA0ZTA2ZTUmc3RhdGU9RGN0SkRnSWhFRUJSMExPNGhHWW9wb1h4S0thRTBpYnBocVFsVVc4dmlfZDNuelBHenROcDRtcUdCVzlqTUM1WWszVDBJVG13TXFwU0lOc2tuZzh3QXFJQmtjQnJVYndtcllDVUo4Zm5hNWItd2VXMjlWZHQ5N1cyY2QzcmVfd2tiZzFYN1BVQ2F0QVhHMlpxZ3c2Wi1fNEg=&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLE
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1taXN0eS5hbG5haGFvaSU0MHRleGFuYWNlbnRlci5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjE0Y2EyYzMtN2Y5YS0zOGJkLWUyMGItMjM1OWM4NWIwN2EwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODcyNTczMjkxODY3OTU0My44MGRkNGMzOS1mYjQyLTQ4MjQtOTQ2MS1kNjFlMTA0ZTA2ZTUmc3RhdGU9RGN0SkRnSWhFRUJSMExPNGhHWW9wb1h4S0thRTBpYnBocVFsVVc4dmlfZDNuelBHenROcDRtcUdCVzlqTUM1WWszVDBJVG13TXFwU0lOc2tuZzh3QXFJQmtjQnJVYndtcllDVUo4Zm5hNWItd2VXMjlWZHQ5N1cyY2QzcmVfd2tiZzFYN1BVQ2F0QVhHMlpxZ3c2Wi1fNEg=&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_v20ia-gahguvu2fgvxamhg2.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhl
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1taXN0eS5hbG5haGFvaSU0MHRleGFuYWNlbnRlci5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjE0Y2EyYzMtN2Y5YS0zOGJkLWUyMGItMjM1OWM4NWIwN2EwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODcyNTczMjkxODY3OTU0My44MGRkNGMzOS1mYjQyLTQ4MjQtOTQ2MS1kNjFlMTA0ZTA2ZTUmc3RhdGU9RGN0SkRnSWhFRUJSMExPNGhHWW9wb1h4S0thRTBpYnBocVFsVVc4dmlfZDNuelBHenROcDRtcUdCVzlqTUM1WWszVDBJVG13TXFwU0lOc2tuZzh3QXFJQmtjQnJVYndtcllDVUo4Zm5hNWItd2VXMjlWZHQ5N1cyY2QzcmVfd2tiZzFYN1BVQ2F0QVhHMlpxZ3c2Wi1fNEg=&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWam
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2Q
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQg
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://autolumaled.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-yku
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_ae573f441ee1cf781ec7.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/?2ryn4nn79=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmbG9naW5faGludD1taXN0eS5hbG5haGFvaSU0MHRleGFuYWNlbnRlci5jb20mY2xpZW50LXJlcXVlc3QtaWQ9ZjE0Y2EyYzMtN2Y5YS0zOGJkLWUyMGItMjM1OWM4NWIwN2EwJnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODcyNTczMjkxODY3OTU0My44MGRkNGMzOS1mYjQyLTQ4MjQtOTQ2MS1kNjFlMTA0ZTA2ZTUmc3RhdGU9RGN0SkRnSWhFRUJSMExPNGhHWW9wb1h4S0thRTBpYnBocVFsVVc4dmlfZDNuelBHenROcDRtcUdCVzlqTUM1WWszVDBJVG13TXFwU0lOc2tuZzh3QXFJQmtjQnJVYndtcllDVUo4Zm5hNWItd2VXMjlWZHQ5N1cyY2QzcmVfd2tiZzFYN1BVQ2F0QVhHMlpxZ3c2Wi1fNEg=&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRa
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_D
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQ
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/?2ryn4nn79=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&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQEl
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49-small_e58aafc980614a9cd7796bea7b5ea8f0.jpg HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/applogos/53_8b36337037cff88c3df203bb73d58e41.png HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/images/appbackgrounds/49_7916a894ebde7d29c2cc29b267f1299f.jpg HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /common/instrumentation/dssostatus HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEhBH4fbQk2M7MC4VA2VFfsq4muv5ZbAPAeBOCxdXwmGqz8vI_xA09lf9GEHDx32iZ5ODp1I-dr_2PfaJODe8y3l7xw_Q_zX0liVcjECxzmeUgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEepjIGnEvcPrKO0ItXCb2rP93hLKz2GXNef0QbzSaC6BCh8J6G4RqZOLLykoaRehCthV2F7XDkqLpfGGyPICtzDvt5TN66Lv4T_Q5-JWkGlsRDLgemhr7wwEajoFm4y6Cme8aPcx5DdwHUbJZuThCzdsAWdnJSwiH_DrN2QPK6NQgAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAA; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; wlidperf=FR=L&ST=1736976509405; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE_HYuW-71IJ4e3nEI81FnaOviNBmx2k2bgnbIz0_ZzQ-qxiub_gHhs_r3SoAzXRElumkArlM3G2mAoBWDoiYNRlAR-K5KYu0LnB4sA_2jSvsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQL1HvpXp-l2C92yBChNqsdqEQBBlTB1zXQ5dLIk1j0pQQmybSv2bK4C63L1bPJ_xd7fffJS0Ws38FF_ANc8DaVJ_EZ0_s5WpIaeilQStZsIN7X2eKY0cfxyvtP_O0G0CWNW5WMNMTAoHykfI56-H2PPuLV5Lr80nvSZl3x4DPYkgAA; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwEAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; wlidperf=FR=L&ST=1736976509405; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE_HYuW-71IJ4e3nEI81FnaOviNBmx2k2bgnbIz0_ZzQ-qxiub_gHhs_r3SoAzXRElumkArlM3G2mAoBWDoiYNRlAR-K5KYu0LnB4sA_2jSvsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQL1HvpXp-l2C92yBChNqsdqEQBBlTB1zXQ5dLIk1j0pQQmybSv2bK4C63L1bPJ_xd7fffJS0Ws38FF_ANc8DaVJ_EZ0_s5WpIaeilQStZsIN7X2eKY0cfxyvtP_O0G0CWNW5WMNMTAoHykfI56-H2PPuLV5Lr80nvSZl3x4DPYkgAA; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwEAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://autolumaled.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=38AAA9A35E204628A6FAD36BA9DF6739; OIDC=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; wlidperf=FR=L&ST=1736976524734; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE0OkJcBbWkKCzMuWYvbOm-yeU0QFrdxxuY_qaX6D4bM553quETQHwAd6c5FDh8yf9OR6WvzLeLXKg7UlvR-daW6H1UvXdm-hW72NIpvJMymYgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEZcklTZcH4qibu-yhOktu2MhOcZBVBsxeWC0laAdCwolrbkvQnLdtM0xzzJlbO2t5Anlnxj5Zu3sgCslM7isDdYSenRdDRvYJL3tnOm_UIvu0POJXs3uMQbe8C9CKF6OK48IXB84V-1JOT21m84tTglELSrC4eIBbTAJaeJPtHBogAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwIAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; wlidperf=FR=L&ST=1736976524734; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE0OkJcBbWkKCzMuWYvbOm-yeU0QFrdxxuY_qaX6D4bM553quETQHwAd6c5FDh8yf9OR6WvzLeLXKg7UlvR-daW6H1UvXdm-hW72NIpvJMymYgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEZcklTZcH4qibu-yhOktu2MhOcZBVBsxeWC0laAdCwolrbkvQnLdtM0xzzJlbO2t5Anlnxj5Zu3sgCslM7isDdYSenRdDRvYJL3tnOm_UIvu0POJXs3uMQbe8C9CKF6OK48IXB84V-1JOT21m84tTglELSrC4eIBbTAJaeJPtHBogAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwIAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; wlidperf=FR=L&ST=1736976524734; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE0OkJcBbWkKCzMuWYvbOm-yeU0QFrdxxuY_qaX6D4bM553quETQHwAd6c5FDh8yf9OR6WvzLeLXKg7UlvR-daW6H1UvXdm-hW72NIpvJMymYgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEZcklTZcH4qibu-yhOktu2MhOcZBVBsxeWC0laAdCwolrbkvQnLdtM0xzzJlbO2t5Anlnxj5Zu3sgCslM7isDdYSenRdDRvYJL3tnOm_UIvu0POJXs3uMQbe8C9CKF6OK48IXB84V-1JOT21m84tTglELSrC4eIBbTAJaeJPtHBogAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwIAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; wlidperf=FR=L&ST=1736976524734; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE0OkJcBbWkKCzMuWYvbOm-yeU0QFrdxxuY_qaX6D4bM553quETQHwAd6c5FDh8yf9OR6WvzLeLXKg7UlvR-daW6H1UvXdm-hW72NIpvJMymYgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEZcklTZcH4qibu-yhOktu2MhOcZBVBsxeWC0laAdCwolrbkvQnLdtM0xzzJlbO2t5Anlnxj5Zu3sgCslM7isDdYSenRdDRvYJL3tnOm_UIvu0POJXs3uMQbe8C9CKF6OK48IXB84V-1JOT21m84tTglELSrC4eIBbTAJaeJPtHBogAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwIAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; wlidperf=FR=L&ST=1736976524734; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE0OkJcBbWkKCzMuWYvbOm-yeU0QFrdxxuY_qaX6D4bM553quETQHwAd6c5FDh8yf9OR6WvzLeLXKg7UlvR-daW6H1UvXdm-hW72NIpvJMymYgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEZcklTZcH4qibu-yhOktu2MhOcZBVBsxeWC0laAdCwolrbkvQnLdtM0xzzJlbO2t5Anlnxj5Zu3sgCslM7isDdYSenRdDRvYJL3tnOm_UIvu0POJXs3uMQbe8C9CKF6OK48IXB84V-1JOT21m84tTglELSrC4eIBbTAJaeJPtHBogAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwIAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://autolumaled.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=38AAA9A35E204628A6FAD36BA9DF6739; OIDC=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; wlidperf=FR=L&ST=1736976524734; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE0OkJcBbWkKCzMuWYvbOm-yeU0QFrdxxuY_qaX6D4bM553quETQHwAd6c5FDh8yf9OR6WvzLeLXKg7UlvR-daW6H1UvXdm-hW72NIpvJMymYgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEZcklTZcH4qibu-yhOktu2MhOcZBVBsxeWC0laAdCwolrbkvQnLdtM0xzzJlbO2t5Anlnxj5Zu3sgCslM7isDdYSenRdDRvYJL3tnOm_UIvu0POJXs3uMQbe8C9CKF6OK48IXB84V-1JOT21m84tTglELSrC4eIBbTAJaeJPtHBogAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwIAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; wlidperf=FR=L&ST=1736976524734; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE0OkJcBbWkKCzMuWYvbOm-yeU0QFrdxxuY_qaX6D4bM553quETQHwAd6c5FDh8yf9OR6WvzLeLXKg7UlvR-daW6H1UvXdm-hW72NIpvJMymYgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEZcklTZcH4qibu-yhOktu2MhOcZBVBsxeWC0laAdCwolrbkvQnLdtM0xzzJlbO2t5Anlnxj5Zu3sgCslM7isDdYSenRdDRvYJL3tnOm_UIvu0POJXs3uMQbe8C9CKF6OK48IXB84V-1JOT21m84tTglELSrC4eIBbTAJaeJPtHBogAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwIAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; wlidperf=FR=L&ST=1736976524734; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE0OkJcBbWkKCzMuWYvbOm-yeU0QFrdxxuY_qaX6D4bM553quETQHwAd6c5FDh8yf9OR6WvzLeLXKg7UlvR-daW6H1UvXdm-hW72NIpvJMymYgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEZcklTZcH4qibu-yhOktu2MhOcZBVBsxeWC0laAdCwolrbkvQnLdtM0xzzJlbO2t5Anlnxj5Zu3sgCslM7isDdYSenRdDRvYJL3tnOm_UIvu0POJXs3uMQbe8C9CKF6OK48IXB84V-1JOT21m84tTglELSrC4eIBbTAJaeJPtHBogAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwIAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; wlidperf=FR=L&ST=1736976539999; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEpXE-CSFVrBnSQW2ekA9i1fYny8GZY_oQx7AwkrYKTwn1cZX30jwJHT52-Lwb2LH13Y6DW6y8a-dYwNFGWgApZGbVmnojhKUWul9xzndCAV0gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEPz-RzkOTBJhwLq908AHyyUpH1qPLXnx6AGUHzTyqMi-7TT_w4kJyjOaI0CyR3_i3PDzIFqfV7iXquUWj-B2bNzqvXgwf0kjQ8GxkgGq9Kv8hdU8KzShSBwFs73BpW_99QSwdblmEriM3dBTbZakNN1myAxnG0TKU_SvhNXIgJFEgAA; esctx-fwJ9NPd5vo=AQABCQEAAABVrSpeuWamRam2jAF1XRQE6XrcD2W2Z7FIXRsBUL440nE8nLAsMOfDII4-XZn1ibGJ4Uk5gGBW2Ssy9cqeHF-6n16SbXgvblrGgorr6rJEJv9oIEzfc4yOFoBzyTJl-IbtcOfQ-Qob_uc6gKsaWcKL0x9VnNtsZ-CrETqjuPOZKiAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwMAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; wlidperf=FR=L&ST=1736976539999; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEpXE-CSFVrBnSQW2ekA9i1fYny8GZY_oQx7AwkrYKTwn1cZX30jwJHT52-Lwb2LH13Y6DW6y8a-dYwNFGWgApZGbVmnojhKUWul9xzndCAV0gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEPz-RzkOTBJhwLq908AHyyUpH1qPLXnx6AGUHzTyqMi-7TT_w4kJyjOaI0CyR3_i3PDzIFqfV7iXquUWj-B2bNzqvXgwf0kjQ8GxkgGq9Kv8hdU8KzShSBwFs73BpW_99QSwdblmEriM3dBTbZakNN1myAxnG0TKU_SvhNXIgJFEgAA; esctx-fwJ9NPd5vo=AQABCQEAAABVrSpeuWamRam2jAF1XRQE6XrcD2W2Z7FIXRsBUL440nE8nLAsMOfDII4-XZn1ibGJ4Uk5gGBW2Ssy9cqeHF-6n16SbXgvblrGgorr6rJEJv9oIEzfc4yOFoBzyTJl-IbtcOfQ-Qob_uc6gKsaWcKL0x9VnNtsZ-CrETqjuPOZKiAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwMAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://autolumaled.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=38AAA9A35E204628A6FAD36BA9DF6739; OIDC=1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://autolumaled.com/common/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; esctx-fwJ9NPd5vo=AQABCQEAAABVrSpeuWamRam2jAF1XRQE6XrcD2W2Z7FIXRsBUL440nE8nLAsMOfDII4-XZn1ibGJ4Uk5gGBW2Ssy9cqeHF-6n16SbXgvblrGgorr6rJEJv9oIEzfc4yOFoBzyTJl-IbtcOfQ-Qob_uc6gKsaWcKL0x9VnNtsZ-CrETqjuPOZKiAA; wlidperf=FR=L&ST=1736976548781; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE22OBaRsK4gy9nTQ-bT2owRusZpL9DwxB0R5udxIQdKdNLhTCSNW0hdhg5hkCap4oytIFg1yAzm4deBH4m1x-LyFwpK1hYYFlAKtcZI8yVt0gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQE1G0ehfawx2NbKsmBwQchGYeiQz6s894OD9N36Rqb8_hkp2l7VPIqCtymz6PnVQ1dWaF7d_6U5TB3oB2Q7-8GFFtXMqh6sh7gPgZklQtuC4YXHgNEOqjpda5ROtcbeXmGXuxpv4A8x3NS6Tz9fBBOqxSB074zE83um6Ms45h8BIggAA; esctx-n1KqLokj53c=AQABCQEAAABVrSpeuWamRam2jAF1XRQE01KAOyaV57haazCiLxTOehbIZVGeZisuvxUbKWFGVvu_ef
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_n7VKwtWYm2mBLcIKAZfQlw2.js HTTP/1.1Host: autolumaled.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=934EA1273C9C4ED7A27A9C315942EF7E; OIDC=1; OpenIdConnect.nonce.v3.cFjt6HkWPg1ehYNArInyrbSYbCSOvgR0wEr1c0qc_C8=638725732918679543.80dd4c39-fb42-4824-9461-d61e104e06e5; qPdM=lOf2Q7puQRgd; qPdM.sig=t-VE8IvcngrXI8gZ8-x95czJlMo; esctx-CqJm0M6cNFY=AQABCQEAAABVrSpeuWamRam2jAF1XRQEteSlY5uxFGU9M0jPCI6nTfh1v1cny8ZsZfULXpr6AurrOWIew3Zrn08AXqMisX7L6h2O-2Y6FGRnX8qCnIKIzD1OBMgdjlLBt01CXbp6PzNnpAZjUQc2qoWHbqfwfFGMF_bmzlFcMul8cna6nzCisCAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; OpenIdConnect.nonce.v3.4V0ELzlmUpFSvbdgQSQDVWW64hye9gpO4ujLzgFFFMs=638725732933720717.4b2f65a6-362e-4faf-b018-a6d404712139; X-OWA-RedirectHistory=ArLym14BjVpqhKs13Qg|ArLym14B99eEg6s13Qg; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; esctx-aBJwIygq0=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWSb_7dVR68zFZ6AMHdfuNefXKGr5-0z7FkcBIWOhRjWcDI5eq8ZpEjZoB9PCbbvuKEPPXFerB_kZf-1MeC0pnVpW_dHOMok5OexqpwGuCpaIGdbWdKLIRtUz-oxCCOxCvEWaY25fpH5jmhjzpFon7yAA; esctx-ykuwPT8YpJM=AQABCQEAAABVrSpeuWamRam2jAF1XRQElwCjo7muzRnLEpqa1lEnSCKFgwambhlIRa5SrZoLxZ_v5kZsUU5rzGftlvav5ul4lkA8GOTcn1gjvb5IVQLB6ueEduS6OrrR5qZ7l4ZYAQj_8UCMzjs2qouFaBOWNlpAWukaoIiwKLD6ledwN7MOuyAA; brcap=0; MSFPC=GUID=83492d9ad04e4f02a6a4fd2c2e3ed87b&HASH=8349&LV=202501&V=4&LU=1736976503478; esctx-RmIuEDBvZng=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhcpmGhNs38BsphWvvRhf_I_VldblslM2q99SEgasClYFdQmoBmqt-8-zSQEOml7Vebn3r2ceY6wP_MNBLccqO6UGN6TN6DGQYZBHSECji13W-U-fj0OK7-MJYGd3RSax8Z-XSYsbVaa0YEsWXQbx3yAA; esctx-wYW4Xvclis4=AQABCQEAAABVrSpeuWamRam2jAF1XRQEhnHEj6HdhHNk4TxNtDMPQhGKQY65LtgeTfJx-wgg7_Od65U0YGCoQ7fmqAlkNa6l_KKNTz8A5cqZGloOj4DrvQ2ofk5E3IfeaRZHMpct-00qe09Q9BHgSefFCINdUAHjHylhaT83LCRNTETetI-x9iAA; esctx-fwJ9NPd5vo=AQABCQEAAABVrSpeuWamRam2jAF1XRQE6XrcD2W2Z7FIXRsBUL440nE8nLAsMOfDII4-XZn1ibGJ4Uk5gGBW2Ssy9cqeHF-6n16SbXgvblrGgorr6rJEJv9oIEzfc4yOFoBzyTJl-IbtcOfQ-Qob_uc6gKsaWcKL0x9VnNtsZ-CrETqjuPOZKiAA; wlidperf=FR=L&ST=1736976548781; buid=1.ASwAMe_N-B6jSkuT5F9XHpElWgIAAAAAAPEPzgAAAAAAAAABAAAsAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE22OBaRsK4gy9nTQ-bT2owRusZpL9DwxB0R5udxIQdKdNLhTCSNW0hdhg5hkCap4oytIFg1yAzm4deBH4m1x-LyFwpK1hYYFlAKtcZI8yVt0gAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQE1G0ehfawx2NbKsmBwQchGYeiQz6s894OD9N36Rqb8_hkp2l7VPIqCtymz6PnVQ1dWaF7d_6U5TB3oB2Q7-8GFFtXMqh6sh7gPgZklQtuC4YXHgNEOqjpda5ROtcbeXmGXuxpv4A8x3NS6Tz9fBBOqxSB074zE83um6Ms45h8BIggAA; esctx-n1KqLokj53c=AQABCQEAAABVrSpeuWamRam2jAF1XRQE01KAOyaV57haazCiLxTOehbIZVGeZisuvxUbKWFGVvu_efP9biSDrANTnRTAjos5YFjLv9dy4QYKz5sOBI9oFjXO7T7QG094tQdYI_g1y8Hbhj3haVczmR3dYpCA6FziJDOz0hsgKE76FaWltAvVzCAA; fpc=Av0HcaHWWqBAnpN9LY30YTaerOTJAQAAAG0fGt8OAAAAi2ymbwQAAAB9HxrfDgAAAA
Source: global traffic	HTTP traffic detected: GET /owa/prefetch.aspx HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://autolumaled.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ClientId=38AAA9A35E204628A6FAD36BA9DF6739; OIDC=1
Source: global traffic	HTTP traffic detected: GET /helosuns/152c27645d86ba0833d5001d33047642/bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ== HTTP/1.1Host: sexado.nlConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: sexado.nlConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Referer: http://sexado.nl/helosuns/152c27645d86ba0833d5001d33047642/bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ==Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: google.com.vn
Source: global traffic	DNS traffic detected: DNS query: www.google.com.vn
Source: global traffic	DNS traffic detected: DNS query: sexado.nl
Source: global traffic	DNS traffic detected: DNS query: 3a84bd6a.82e4c7deb867f162b7c6c8d3.workers.dev
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aspac-alrcargo.com
Source: global traffic	DNS traffic detected: DNS query: autolumaled.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: 198.187.3.20.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: passwordreset.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/967256325:1736972940:BULGYH6RHzVIeaHAiHpyt2EoH7NHlMzwQO4DhukKvUE/9028f3f06abdc33b/KnBGlt8HEnyA649jE8Pe0fKpyo281NvO_3VoxTne_h4-1736976478-1.1.1.1-f.izfE6pZY2hU7N6H7sr3HXZZRKDJVyf91EOpV8kdpcCn.xDlXDq0EH5YW3hbJqT HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3337sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: KnBGlt8HEnyA649jE8Pe0fKpyo281NvO_3VoxTne_h4-1736976478-1.1.1.1-f.izfE6pZY2hU7N6H7sr3HXZZRKDJVyf91EOpV8kdpcCn.xDlXDq0EH5YW3hbJqTsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/uldsu/0x4AAAAAAA5Vi5ptLVedHwH9/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsP3P: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 5c5ec7e3-bfb8-4558-b6fc-bc207ee81a00x-ms-ests-server: 2.1.19870.3 - NCUS ProdSlicesnel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.PReferrer-Policy: strict-origin-when-cross-originContent-Security-Policy-Report-Only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-TjxCOGnGn9C13hCQMYHATQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-AllDate: Wed, 15 Jan 2025 21:28:13 GMTConnection: closeContent-Length: 0Content-Security-Policy: default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; form-action * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: filesystem: ; frame-ancestors 'self' * http://* https://* file://* about: javascript: data: blob: filesystem: ; object-src * data: blob: filesystem: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline';

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 15 Jan 2025 21:27:55 GMTServer: ApacheContent-Length: 315Keep-Alive: timeout=5, max=99Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

URLs found in memory or binary data

Source: chromecache_128.2.dr	String found in binary or memory: http://github.com/jquery/globalize
Source: chromecache_154.2.dr, chromecache_110.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_154.2.dr, chromecache_110.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_154.2.dr, chromecache_110.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_132.2.dr, chromecache_105.2.dr	String found in binary or memory: https://aspac-alrcargo.com/?eawkysbj
Source: chromecache_111.2.dr	String found in binary or memory: https://aspac-alrcargo.com/?eawkysbj&qrc=bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ==
Source: chromecache_134.2.dr	String found in binary or memory: https://autolumaled.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2F1dG9sdW
Source: chromecache_132.2.dr, chromecache_105.2.dr, chromecache_111.2.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_154.2.dr, chromecache_110.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: chromecache_122.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_122.2.dr	String found in binary or memory: https://login.windows-ppe.net

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 58186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 58168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 56440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 56423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 58157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 58175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 58167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58201
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58200
Source: unknown	Network traffic detected: HTTP traffic on port 58156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 56432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 56345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56440
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56320
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56441
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56321
Source: unknown	Network traffic detected: HTTP traffic on port 56431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58186
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58187
Source: unknown	Network traffic detected: HTTP traffic on port 58154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56449
Source: unknown	Network traffic detected: HTTP traffic on port 58143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56451
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56453
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58192
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58190
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56463
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56461
Source: unknown	Network traffic detected: HTTP traffic on port 56340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56345
Source: unknown	Network traffic detected: HTTP traffic on port 56453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58143
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 56424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58157
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58154
Source: unknown	Network traffic detected: HTTP traffic on port 58170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56412
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56413
Source: unknown	Network traffic detected: HTTP traffic on port 56452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58168
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58167
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58169
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56428
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56429
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56425
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58171
Source: unknown	Network traffic detected: HTTP traffic on port 56463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58170
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58172
Source: unknown	Network traffic detected: HTTP traffic on port 56429 -> 443

System Summary

Classification label

Source: classification engine

Classification label: mal68.phis.win@22/97@39/15

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1852 --field-trial-handle=1992,i,16436410106066549680,6784928633741777080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://google.com.vn/url?q=IEQBZO82U018ETYNCV6WTYH64K0BD9FgQiApLjODz3yh4nNeW8uuQi&rct=152c27645d86ba0833d5001d33047642wDnNeW8yycT&sa=t&esrc=nTgV8F152c27645d86ba0833d5001d33047642A0xys8Em2FL&source=&cd=tS6T8152c27645d86ba0833d5001d33047642Tiw9XH&cad=JxWzDfBP152c27645d86ba0833d5001d33047642VS0Y&ved=xjnktlqryYWwVTDrgvK&uact=&url=amp%2Fsexado.nl/helosuns/152c27645d86ba0833d5001d33047642/bWlzdHkuYWxuYWhhb2lAdGV4YW5hY2VudGVyLmNvbQ=="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1852 --field-trial-handle=1992,i,16436410106066549680,6784928633741777080,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Windows shortcut file (LNK) contains relative path

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Boot Survival

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior