Windows Analysis Report
Michael.langedijk Vacations and salaries.pdf

Overview

General Information

Sample name: Michael.langedijk Vacations and salaries.pdf
Analysis ID: 1615151
MD5: ed0f4d42952e2696cb11beffcfd28178
SHA1: 8e1b6f6d1ae4fe8fe0a964d4af370ba92682ac88
SHA256: 49bb4f56744c70ac85a97a7d119321253acaaf8535b8616069e69ec670e19f4a
Infos:

Detection

HTMLPhisher
Score: 68
Range: 0 - 100
Confidence: 100%

Signatures

AI detected phishing page
Suricata IDS alerts for network traffic
Yara detected HtmlPhish54
AI detected landing page (webpage, office document or email)
Detected hidden input values containing email addresses (often used in phishing pages)
Detected non-DNS traffic on DNS port
HTML body contains low number of good links
HTML page contains hidden javascript code
HTML title does not match URL
IP address seen in connection with other malware
Internet Provider seen in connection with other malware

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious

Phishing
barindex
AI detected phishing page
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true Joe Sandbox AI: Score: 9 Reasons: The brand 'Mobilexpense' is known and typically associated with the domain 'mobilexpense.com'., The provided URL 'ghvvhjgvjhhvb.santacruzcargosrl.com' does not match the legitimate domain for Mobilexpense., The domain 'santacruzcargosrl.com' does not appear to be related to Mobilexpense, which raises suspicion., The subdomain 'ghvvhjgvjhhvb' is nonsensical and does not provide any clear association with Mobilexpense., The presence of a password input field on a suspicious domain increases the risk of phishing. DOM: 3.4.pages.csv
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true Joe Sandbox AI: Score: 9 Reasons: The brand 'Mobilexpense' is known and typically associated with the domain 'mobilexpense.com'., The provided URL 'ghvvhjgvjhhvb.santacruzcargosrl.com' does not match the legitimate domain for Mobilexpense., The domain 'santacruzcargosrl.com' does not appear to be related to Mobilexpense, which raises suspicion., The subdomain 'ghvvhjgvjhhvb' is nonsensical and does not provide any clear association with Mobilexpense., The presence of an input field for 'Enter password' on a suspicious domain increases the likelihood of phishing. DOM: 3.5.pages.csv
Yara detected HtmlPhish54
Source: Yara match File source: 1.3.id.script.csv, type: HTML
Source: Yara match File source: 1.10.id.script.csv, type: HTML
Source: Yara match File source: 2.2.pages.csv, type: HTML
Source: Yara match File source: 3.3.pages.csv, type: HTML
Source: Yara match File source: 3.5.pages.csv, type: HTML
AI detected landing page (webpage, office document or email)
Source: PDF document Joe Sandbox AI: PDF document contains QR code
Detected hidden input values containing email addresses (often used in phishing pages)
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: michael.langedijk@mobilexpense.com
HTML body contains low number of good links
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: Number of links: 0
HTML page contains hidden javascript code
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com HTTP Parser: Base64 decoded: wss://ghvvhjgvjhhvb.santacruzcargosrl.com/04a37a65110740b7827e9d479d7b8726/
HTML title does not match URL
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: Title: Sign in to your account does not match URL
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: Iframe src: https://540c833d-04a37a65.santacruzcargosrl.com/Prefetch/Prefetch.aspx
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: Iframe src: https://540c833d-04a37a65.santacruzcargosrl.com/Prefetch/Prefetch.aspx
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: <input type="password" .../> found
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com HTTP Parser: No favicon
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: No favicon
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: No favicon
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: No favicon
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: No favicon
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: No <meta name="author".. found
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: No <meta name="author".. found
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: No <meta name="copyright".. found
Source: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP Parser: No <meta name="copyright".. found

Networking
barindex
Suricata IDS alerts for network traffic
Source: Network traffic Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 64.227.123.94:443 -> 192.168.2.7:49720
Detected non-DNS traffic on DNS port
Source: global traffic TCP traffic: 192.168.2.7:62351 -> 1.1.1.1:53
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View IP Address: 191.252.141.106 191.252.141.106
Source: Joe Sandbox View IP Address: 191.252.141.106 191.252.141.106
Internet Provider seen in connection with other malware
Source: Joe Sandbox View ASN Name: DIGITALOCEAN-ASNUS DIGITALOCEAN-ASNUS
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 104.40.149.189
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global traffic HTTP traffic detected: GET /yoya/michael.langedijk@mobilexpense.com/bWljaGFlbC5sYW5nZWRpamtAbW9iaWxleHBlbnNlLmNvbQ== HTTP/1.1Host: aral-latam.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: aral-latam.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aral-latam.com/yoya/michael.langedijk@mobilexpense.com/bWljaGFlbC5sYW5nZWRpamtAbW9iaWxleHBlbnNlLmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?vv=michael.langedijk@mobilexpense.com HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://aral-latam.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /?vv=michael.langedijk@mobilexpense.com HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ghvvhjgvjhhvb.santacruzcargosrl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /04a37a65110740b7827e9d479d7b8726/ HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ghvvhjgvjhhvb.santacruzcargosrl.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="Sec-WebSocket-Key: 8h4MFtqfkyO3lZ+WOsfUPQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic HTTP traffic detected: GET /?vv=michael.langedijk@mobilexpense.com&sso_reload=true HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ghvvhjgvjhhvb.santacruzcargosrl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_-8cgqRzfEOPEpYl9MSuPRw2.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ghvvhjgvjhhvb.santacruzcargosrl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_b6qmkv34zrtzwovprnovhw2.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ghvvhjgvjhhvb.santacruzcargosrl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_b6qmkv34zrtzwovprnovhw2.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /04a37a65110740b7827e9d479d7b8726/ HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ghvvhjgvjhhvb.santacruzcargosrl.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1Sec-WebSocket-Key: me9Bqknsbv9Zp1EwTqqPFA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_-8cgqRzfEOPEpYl9MSuPRw2.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_72a1051aa2aa2943d8c1.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: 540c833d-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4ba7c391e6f3f547d8ce.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /04a37a65110740b7827e9d479d7b8726/ HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ghvvhjgvjhhvb.santacruzcargosrl.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=ca15c061-6be7-47f5-a0b5-18436f5ac03e; brcap=0Sec-WebSocket-Key: UdcJPAi8oTRuct0HqixIug==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_72a1051aa2aa2943d8c1.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /dec6ba50-04a37a65.santacruzcargosrl.com/winauth/ssoprobe?client-request-id=c79cf263-a1cf-4f67-926b-e1bdd74e525c&_=1739547429588 HTTP/1.1Host: 874a96e7-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4ba7c391e6f3f547d8ce.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_9508950c2b89b79b3f88.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /04a37a65110740b7827e9d479d7b8726/ HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ghvvhjgvjhhvb.santacruzcargosrl.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=ca15c061-6be7-47f5-a0b5-18436f5ac03e; brcap=0; ai_session=8gtqzOZ22AmkPRah8aLzpp|1739547432261|1739547432261Sec-WebSocket-Key: ChKiVmZ5NYFhnJNo9By3CQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /c1c6b6c8-1hydalwskawlxnkxmkobien0ynyazcmqepcjeqdvih0/logintenantbranding/0/bannerlogo?ts=638011567569319580 HTTP/1.1Host: e69c9dd4-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /c1c6b6c8-1hydalwskawlxnkxmkobien0ynyazcmqepcjeqdvih0/logintenantbranding/0/favicon?ts=638169015598283767 HTTP/1.1Host: e69c9dd4-04a37a65.santacruzcargosrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_9508950c2b89b79b3f88.js HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="
Source: global traffic HTTP traffic detected: GET /common/instrumentation/dssostatus HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=ca15c061-6be7-47f5-a0b5-18436f5ac03e; brcap=0; ai_session=8gtqzOZ22AmkPRah8aLzpp|1739547432261|1739547432261
Source: global traffic HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1Host: 418eb79b-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; MC1="GUID=276d715bae6d44a5a0fc47caca47f537&HASH=276d&LV=202502&V=4&LU=1739542883222"; MS0=3ea8041ca8714170aa4b85792a3caf6d
Source: global traffic HTTP traffic detected: GET /c1c6b6c8-1hydalwskawlxnkxmkobien0ynyazcmqepcjeqdvih0/logintenantbranding/0/bannerlogo?ts=638011567569319580 HTTP/1.1Host: e69c9dd4-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; MC1="GUID=276d715bae6d44a5a0fc47caca47f537&HASH=276d&LV=202502&V=4&LU=1739542883222"; MS0=3ea8041ca8714170aa4b85792a3caf6d
Source: global traffic HTTP traffic detected: GET /c1c6b6c8-1hydalwskawlxnkxmkobien0ynyazcmqepcjeqdvih0/logintenantbranding/0/favicon?ts=638169015598283767 HTTP/1.1Host: e69c9dd4-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; MC1="GUID=276d715bae6d44a5a0fc47caca47f537&HASH=276d&LV=202502&V=4&LU=1739542883222"; MS0=3ea8041ca8714170aa4b85792a3caf6d
Source: global traffic HTTP traffic detected: GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1Host: 02a33b31-04a37a65.santacruzcargosrl.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; MC1="GUID=276d715bae6d44a5a0fc47caca47f537&HASH=276d&LV=202502&V=4&LU=1739542883222"; MS0=3ea8041ca8714170aa4b85792a3caf6d
Source: global traffic HTTP traffic detected: GET /04a37a65110740b7827e9d479d7b8726/ HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://ghvvhjgvjhhvb.santacruzcargosrl.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: smgsX0="MDRhMzdhNjUtMTEwNy00MGI3LTgyN2UtOWQ0NzlkN2I4NzI2OjZiZWJkNzYyLTMzZTItNGU0NC04MTczLTI4NDMyMGQwODQ5Yw=="; AADSSO=NA|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=ca15c061-6be7-47f5-a0b5-18436f5ac03e; brcap=0; ai_session=8gtqzOZ22AmkPRah8aLzpp|1739547432261|1739547432261; MC1="GUID=276d715bae6d44a5a0fc47caca47f537&HASH=276d&LV=202502&V=4&LU=1739542883222"; MS0=3ea8041ca8714170aa4b85792a3caf6d; MSFPC=GUID=276d715bae6d44a5a0fc47caca47f537&HASH=276d&LV=202502&V=4&LU=1739542883222Sec-WebSocket-Key: 5AXroKtCKOoR0MewkwvJSg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Microsoft-CryptoAPI/10.0Host: x1.i.lencr.org
Source: global traffic DNS traffic detected: DNS query: aral-latam.com
Source: global traffic DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic DNS traffic detected: DNS query: www.google.com
Source: global traffic DNS traffic detected: DNS query: ghvvhjgvjhhvb.santacruzcargosrl.com
Source: global traffic DNS traffic detected: DNS query: 418eb79b-04a37a65.santacruzcargosrl.com
Source: global traffic DNS traffic detected: DNS query: 647d8da9-04a37a65.santacruzcargosrl.com
Source: global traffic DNS traffic detected: DNS query: 3b072b6e-04a37a65.santacruzcargosrl.com
Source: global traffic DNS traffic detected: DNS query: l1ve.santacruzcargosrl.com
Source: global traffic DNS traffic detected: DNS query: 540c833d-04a37a65.santacruzcargosrl.com
Source: global traffic DNS traffic detected: DNS query: 874a96e7-04a37a65.santacruzcargosrl.com
Source: global traffic DNS traffic detected: DNS query: e69c9dd4-04a37a65.santacruzcargosrl.com
Source: global traffic DNS traffic detected: DNS query: 02a33b31-04a37a65.santacruzcargosrl.com
Source: unknown HTTP traffic detected: POST /?vv=michael.langedijk@mobilexpense.com HTTP/1.1Host: ghvvhjgvjhhvb.santacruzcargosrl.comConnection: keep-aliveContent-Length: 4703Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://ghvvhjgvjhhvb.santacruzcargosrl.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ghvvhjgvjhhvb.santacruzcargosrl.com/?vv=michael.langedijk@mobilexpense.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 14 Feb 2025 14:18:40 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 14 Feb 2025 14:21:09 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 00f22ae7-c4c6-4a48-bcec-1b5335261700x-ms-ests-server: 2.1.20051.5 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://647d8da9-04a37a65.santacruzcargosrl.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: *access-control-allow-headers: *
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 14 Feb 2025 14:21:09 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: a3e2304b-2e36-441f-8995-5056f8516f00x-ms-ests-server: 2.1.20003.9 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://647d8da9-04a37a65.santacruzcargosrl.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: *access-control-allow-headers: *
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 14 Feb 2025 14:21:13 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 4fc81baf-4348-4569-b93b-b355dda23000x-ms-ests-server: 2.1.20003.9 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://647d8da9-04a37a65.santacruzcargosrl.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: *access-control-allow-headers: *
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 14 Feb 2025 14:21:14 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: 97aa64cb-6486-4d05-b683-942ad2d38bc8x-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 1627FE87FB884A268BAA66884447EF2C Ref B: AMS231032604045 Ref C: 2025-02-14T14:21:14Zaccess-control-allow-origin: *access-control-allow-headers: *
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 14 Feb 2025 14:21:16 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 15dfdbb1-365f-49fe-a592-b1df82630b00x-ms-ests-server: 2.1.20003.9 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://647d8da9-04a37a65.santacruzcargosrl.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: *access-control-allow-headers: *
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 14 Feb 2025 14:21:21 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 2eca3e3f-b69d-46ef-b5f3-833b47ae3300x-ms-ests-server: 2.1.20003.9 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://647d8da9-04a37a65.santacruzcargosrl.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: *access-control-allow-headers: *
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Fri, 14 Feb 2025 14:21:28 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 3e9571b2-e8c4-4358-8ad7-3556b1d25500x-ms-ests-server: 2.1.20003.9 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://647d8da9-04a37a65.santacruzcargosrl.com/api/report?catId=GW+estsfd+ams2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: *access-control-allow-headers: *
Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr String found in binary or memory: http://x1.i.lencr.org/
Source: ReaderMessages.0.dr String found in binary or memory: https://www.adobe.co
Source: unknown Network traffic detected: HTTP traffic on port 62601 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62624 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62609 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62618 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62599 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62610 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown Network traffic detected: HTTP traffic on port 62593 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62585 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62609
Source: unknown Network traffic detected: HTTP traffic on port 62629 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62604 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62621 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62601
Source: unknown Network traffic detected: HTTP traffic on port 62579 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62602
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62603
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62604
Source: unknown Network traffic detected: HTTP traffic on port 62582 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62605
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62606
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62607
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62608
Source: unknown Network traffic detected: HTTP traffic on port 62596 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62615 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62600
Source: unknown Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62626 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62580
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62581
Source: unknown Network traffic detected: HTTP traffic on port 62603 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62579
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62612
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62613
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62614
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62615
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62616
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62618
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62619
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown Network traffic detected: HTTP traffic on port 62597 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown Network traffic detected: HTTP traffic on port 62631 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62577
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62610
Source: unknown Network traffic detected: HTTP traffic on port 62612 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62611
Source: unknown Network traffic detected: HTTP traffic on port 62591 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62590
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62591
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62592
Source: unknown Network traffic detected: HTTP traffic on port 62606 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62583 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62623 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62623
Source: unknown Network traffic detected: HTTP traffic on port 62580 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62624
Source: unknown Network traffic detected: HTTP traffic on port 62577 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62625
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62626
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62627
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62628
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62629
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62582
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62583
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62584
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62585
Source: unknown Network traffic detected: HTTP traffic on port 62634 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62586
Source: unknown Network traffic detected: HTTP traffic on port 62594 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62587
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62620
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62621
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62589
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62622
Source: unknown Network traffic detected: HTTP traffic on port 62592 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62628 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62620 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62586 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62605 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62634
Source: unknown Network traffic detected: HTTP traffic on port 62614 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62593
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62594
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62595
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62596
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62597
Source: unknown Network traffic detected: HTTP traffic on port 62595 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62598
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62631
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 62599
Source: unknown Network traffic detected: HTTP traffic on port 62625 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62608 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62589 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62600 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62619 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62611 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62590 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62607 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62584 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62622 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62581 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62616 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62627 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62587 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62602 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62613 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 62598 -> 443
Source: classification engine Classification label: mal68.phis.winPDF@29/100@33/9
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-02-14 09-18-32-567.log Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA Jump to behavior
Source: unknown Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Michael.langedijk Vacations and salaries.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1716,i,16231115247410210710,14177633878551563429,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://aral-latam.com/yoya/michael.langedijk@mobilexpense.com/bWljaGFlbC5sYW5nZWRpamtAbW9iaWxleHBlbnNlLmNvbQ==
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2036,i,4628127369903158306,14261556293105471556,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2116 --field-trial-handle=1716,i,16231115247410210710,14177633878551563429,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2036,i,4628127369903158306,14261556293105471556,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: Michael.langedijk Vacations and salaries.pdf Initial sample: PDF keyword /JS count = 0
Source: Michael.langedijk Vacations and salaries.pdf Initial sample: PDF keyword /JavaScript count = 0
Source: A9p3bpce_qdek9w_420.tmp.0.dr Initial sample: PDF keyword /JS count = 0
Source: A9p3bpce_qdek9w_420.tmp.0.dr Initial sample: PDF keyword /JavaScript count = 0
Source: Michael.langedijk Vacations and salaries.pdf Initial sample: PDF keyword /EmbeddedFile count = 0
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe Process information set: NOOPENFILEERRORBOX Jump to behavior
windows-stand
Behavior
Click here to start
Slideshow Behavior Animation
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1615151 Sample: Michael.langedijk Vacations... Startdate: 14/02/2025 Architecture: WINDOWS Score: 68 20 x1.i.lencr.org 2->20 22 e8652.dscx.akamaiedge.net 2->22 24 2 other IPs or domains 2->24 40 Suricata IDS alerts for network traffic 2->40 42 AI detected phishing page 2->42 44 Yara detected HtmlPhish54 2->44 46 AI detected landing page (webpage, office document or email) 2->46 8 chrome.exe 1 2->8         started        11 Acrobat.exe 18 69 2->11         started        signatures3 process4 dnsIp5 26 192.168.2.7, 123, 138, 443 unknown unknown 8->26 28 192.168.2.16 unknown unknown 8->28 30 2 other IPs or domains 8->30 13 chrome.exe 8->13         started        16 AcroCEF.exe 109 11->16         started        process6 dnsIp7 32 e69c9dd4-04a37a65.santacruzcargosrl.com 64.227.123.94, 443, 49720, 49721 DIGITALOCEAN-ASNUS United States 13->32 34 l1ve.santacruzcargosrl.com 13->34 38 10 other IPs or domains 13->38 36 e8652.dscx.akamaiedge.net 72.246.169.163, 49712, 80 AKAMAI-ASUS United States 16->36 18 AcroCEF.exe 4 16->18         started        process8
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
64.227.123.94
 874a96e7-04a37a65.santacruzcargosrl.com United States
14061 DIGITALOCEAN-ASNUS true
172.217.18.4
 www.google.com United States
15169 GOOGLEUS false
142.250.185.100
 unknown United States
15169 GOOGLEUS false
72.246.169.163
 e8652.dscx.akamaiedge.net United States
16625 AKAMAI-ASUS false
239.255.255.250
 unknown Reserved
unknown unknown false
191.252.141.106
 aral-latam.com Brazil
27715 LocawebServicosdeInternetSABR false

Private

IP
192.168.2.7
192.168.2.16
192.168.2.6

Contacted Domains

Name IP Active
874a96e7-04a37a65.santacruzcargosrl.com 64.227.123.94 true
e8652.dscx.akamaiedge.net 72.246.169.163 true
02a33b31-04a37a65.santacruzcargosrl.com 64.227.123.94 true
540c833d-04a37a65.santacruzcargosrl.com 64.227.123.94 true
bg.microsoft.map.fastly.net 199.232.214.172 true
3b072b6e-04a37a65.santacruzcargosrl.com 64.227.123.94 true
ghvvhjgvjhhvb.santacruzcargosrl.com 64.227.123.94 true
l1ve.santacruzcargosrl.com 64.227.123.94 true
418eb79b-04a37a65.santacruzcargosrl.com 64.227.123.94 true
647d8da9-04a37a65.santacruzcargosrl.com 64.227.123.94 true
e69c9dd4-04a37a65.santacruzcargosrl.com 64.227.123.94 true
www.google.com 172.217.18.4 true
aral-latam.com 191.252.141.106 true
x1.i.lencr.org unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://540c833d-04a37a65.santacruzcargosrl.com/Prefetch/Prefetch.aspx true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_b6qmkv34zrtzwovprnovhw2.js true
  • Avira URL Cloud: safe
 unknown
https://aral-latam.com/favicon.ico false
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg true
  • Avira URL Cloud: safe
 unknown
https://e69c9dd4-04a37a65.santacruzcargosrl.com/c1c6b6c8-1hydalwskawlxnkxmkobien0ynyazcmqepcjeqdvih0/logintenantbranding/0/bannerlogo?ts=638011567569319580 true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_72a1051aa2aa2943d8c1.js true
  • Avira URL Cloud: safe
 unknown
https://ghvvhjgvjhhvb.santacruzcargosrl.com/common/instrumentation/dssostatus true
  • Avira URL Cloud: safe
 unknown
https://ghvvhjgvjhhvb.santacruzcargosrl.com/04a37a65110740b7827e9d479d7b8726/ true
  • Avira URL Cloud: safe
 unknown
https://874a96e7-04a37a65.santacruzcargosrl.com/dec6ba50-04a37a65.santacruzcargosrl.com/winauth/ssoprobe?client-request-id=c79cf263-a1cf-4f67-926b-e1bdd74e525c&_=1739547429588 true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/js/BssoInterrupt_Core_eaF-Fe71oZcWvr096r6xEw2.js true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_9508950c2b89b79b3f88.js true
  • Avira URL Cloud: safe
 unknown
https://ghvvhjgvjhhvb.santacruzcargosrl.com/favicon.ico true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/js/ConvergedLogin_PCore_-8cgqRzfEOPEpYl9MSuPRw2.js true
  • Avira URL Cloud: safe
 unknown
https://l1ve.santacruzcargosrl.com/Me.htm?v=3 true
  • Avira URL Cloud: safe
 unknown
https://e69c9dd4-04a37a65.santacruzcargosrl.com/c1c6b6c8-1hydalwskawlxnkxmkobien0ynyazcmqepcjeqdvih0/logintenantbranding/0/favicon?ts=638169015598283767 true
  • Avira URL Cloud: safe
 unknown
https://647d8da9-04a37a65.santacruzcargosrl.com/api/report?catId=GW+estsfd+ams2 true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_4ba7c391e6f3f547d8ce.js true
  • Avira URL Cloud: safe
 unknown
https://02a33b31-04a37a65.santacruzcargosrl.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif true
  • Avira URL Cloud: safe
 unknown
https://418eb79b-04a37a65.santacruzcargosrl.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js true
  • Avira URL Cloud: safe
 unknown