Edit tour

Windows Analysis Report
https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHp

Overview

General Information

Sample URL:	https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXh
Analysis ID:	1645532
Infos:

Detection

KnowBe4

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected KnowBe4 simulated phishing

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,4257531998769737014,4011222522614677871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2016 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,4257531998769737014,4011222522614677871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3188 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_KnowBe4	Yara detected KnowBe4 simulated phishing	Joe Security
1.1.pages.csv	JoeSecurity_KnowBe4	Yara detected KnowBe4 simulated phishing	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected KnowBe4 simulated phishing

Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaM... This script exhibits high-risk behaviors, including the use of an obfuscated URL that appears to be a malicious login page. The URL contains a long, encoded string, which is a common tactic used in phishing and other malicious activities. Additionally, the script is likely attempting to redirect the user to a fake login page, which could be used to steal user credentials. These behaviors are highly suspicious and indicate a high risk of malicious intent.

Source: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==	HTTP Parser: No favicon
Source: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.85.166.3:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.85.166.3:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.49.87:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.49.87:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.109:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.109:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.109:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.28.149:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.28.149:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.105:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.41.45:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.41.45:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.245.203:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.20:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.205.186.161:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.205.186.161:443 -> 192.168.2.5:49756 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.147
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866 HTTP/1.1Host: mail.donotreply.bizConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landing_pages/oops/styles.css HTTP/1.1Host: helpimg.s3.amazonaws.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landing_pages/sei.css HTTP/1.1Host: helpimg.s3.amazonaws.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kpbGtMkYJ791HJmrStEqcO324kp1630523335412_200x200 HTTP/1.1Host: image.pitchbook.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/icons/logos-3/504/SharePoint-512.png HTTP/1.1Host: cdn4.iconfinder.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/icons/logos-3/504/SharePoint-512.png HTTP/1.1Host: cdn4.iconfinder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: training.knowbe4.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://helpimg.s3.amazonaws.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: training.knowbe4.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCMDYzgEI0uDOAQiv5M4BCOLkzgEIi+XOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mail.donotreply.biz
Source: global traffic	DNS traffic detected: DNS query: secured-login.net
Source: global traffic	DNS traffic detected: DNS query: helpimg.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: training.knowbe4.com
Source: global traffic	DNS traffic detected: DNS query: image.pitchbook.com
Source: global traffic	DNS traffic detected: DNS query: cdn4.iconfinder.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: preview.training.knowbe4.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closex-amz-delete-marker: truex-amz-version-id: Mnf2RktQImrCptyABtHnrPzNSOC7NdU.Date: Fri, 21 Mar 2025 20:25:05 GMTServer: AmazonS3Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadContent-Security-Policy: default-src 'self'; font-src data: 'self'X-Content-Type-Options: nosniffX-Frame-Options: sameoriginX-XSS-Protection: 1; mode=blockReferrer-Policy: same-originX-Cache: Error from cloudfrontVia: 1.1 d6e8d455c6249e06c531b544b92279c0.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK52-P6Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: 6wZ9qa5VfO0dzIom8-rsK5lomR_g2lq-5FGEF4R7mSHmevgHQl54TA==

Source: chromecache_113.2.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_113.2.dr	String found in binary or memory: http://blog.jquery.com/2012/08/09/jquery-1-8-released/
Source: chromecache_113.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_113.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_113.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_113.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_113.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/)
Source: chromecache_113.2.dr	String found in binary or memory: http://datatables.net).
Source: chromecache_113.2.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_113.2.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_113.2.dr	String found in binary or memory: http://datatables.net/manual/styling/bootstrap
Source: chromecache_113.2.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_113.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_113.2.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_113.2.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_113.2.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_113.2.dr	String found in binary or memory: http://flightschool.acylt.com/devnotes/caret-position-woes/
Source: chromecache_113.2.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_113.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_113.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_113.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_113.2.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_113.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_113.2.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_113.2.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_113.2.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_113.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_113.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_113.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_113.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_113.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_113.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_113.2.dr	String found in binary or memory: http://pdfmake.org
Source: chromecache_104.2.dr	String found in binary or memory: http://preview.training.knowbe4.com/XbkljYWg5bzZ6WXBCR2JxL0dpWStBV3hZdjJKYzRyVE44S1A5WmNXWitSMUdlNG9
Source: chromecache_113.2.dr	String found in binary or memory: http://semver.org/
Source: chromecache_113.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_113.2.dr	String found in binary or memory: http://stackoverflow.com/a/21336448/937891
Source: chromecache_113.2.dr	String found in binary or memory: http://stackoverflow.com/a/26707753
Source: chromecache_113.2.dr	String found in binary or memory: http://stackoverflow.com/a/32954565/96342
Source: chromecache_113.2.dr	String found in binary or memory: http://stackoverflow.com/a/384380/937891
Source: chromecache_113.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_113.2.dr	String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: chromecache_113.2.dr	String found in binary or memory: http://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_113.2.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_113.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_113.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0)
Source: chromecache_113.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: chromecache_113.2.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_113.2.dr	String found in binary or memory: http://www.datatables.net/extensions/select
Source: chromecache_113.2.dr	String found in binary or memory: http://www.macromedia.com/go/getflashplayer
Source: chromecache_113.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_113.2.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: chromecache_113.2.dr	String found in binary or memory: https://blog.alexmaccaw.com/css-transitions
Source: chromecache_113.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_113.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_113.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_113.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_113.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_113.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_113.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_113.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_104.2.dr	String found in binary or memory: https://cdn4.iconfinder.com/data/icons/logos-3/504/SharePoint-512.png
Source: chromecache_113.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#altinput
Source: chromecache_113.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#dateformat
Source: chromecache_113.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#disable
Source: chromecache_113.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/#inline-calendar
Source: chromecache_113.2.dr	String found in binary or memory: https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements
Source: chromecache_113.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_113.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=378607
Source: chromecache_113.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=449857
Source: chromecache_113.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=470258
Source: chromecache_113.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_113.2.dr	String found in binary or memory: https://datatables.net/tn/11
Source: chromecache_113.2.dr	String found in binary or memory: https://developer.apple.com/library/safari/documentation/Tools/Conceptual/SafariExtensionGuide/Worki
Source: chromecache_113.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_113.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Using_Firefox_1.5_caching
Source: chromecache_113.2.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_113.2.dr	String found in binary or memory: https://developer.snapappointments.com/bootstrap-select)
Source: chromecache_113.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_113.2.dr	String found in binary or memory: https://fullcalendar.io/
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#affix
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#alerts
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#buttons
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#carousel
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#collapse
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#dropdowns
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#modals
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#popovers
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#scrollspy
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tabs
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#tooltip
Source: chromecache_113.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/javascript/#transitions
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/DoersGuild/jQuery.print/issues/18#issuecomment-96451589
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/angular/angular/blob/7.2.4/packages/core/src/sanitization/url_sanitizer.ts
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/bassjobsen/Bootstrap-3-Typeahead
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/davidstutz/bootstrap-multiselect)
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jdewit/bootstrap-timepicker/graphs/contributors
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color/
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.0/ui/core.js#L51
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/2.2.4/src/core.js#L448
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_112.2.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/rails/jquery-ujs
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/rails/jquery-ujs/issues/357
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/snapappointments/bootstrap-select/blob/master/LICENSE)
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/14093
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/issues/20280
Source: chromecache_113.2.dr	String found in binary or memory: https://github.com/uxsolutions/bootstrap-datepicker)
Source: chromecache_104.2.dr	String found in binary or memory: https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Source: chromecache_104.2.dr	String found in binary or memory: https://helpimg.s3.amazonaws.com/landing_pages/sei.css
Source: chromecache_113.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_104.2.dr	String found in binary or memory: https://image.pitchbook.com/kpbGtMkYJ791HJmrStEqcO324kp1630523335412_200x200
Source: chromecache_113.2.dr	String found in binary or memory: https://itsjavi.com/bootstrap-colorpicker/
Source: chromecache_113.2.dr	String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: chromecache_113.2.dr	String found in binary or memory: https://modernizr.com/)
Source: chromecache_113.2.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_113.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_110.2.dr	String found in binary or memory: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTl
Source: chromecache_113.2.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_113.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_104.2.dr	String found in binary or memory: https://training.knowbe4.com/assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf
Source: chromecache_104.2.dr	String found in binary or memory: https://training.knowbe4.com/assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8
Source: chromecache_116.2.dr	String found in binary or memory: https://training.knowbe4.com/assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c6
Source: chromecache_104.2.dr	String found in binary or memory: https://training.knowbe4.com/packs/js/vendor-954761ad0dceb106b971.js
Source: chromecache_104.2.dr	String found in binary or memory: https://unpkg.com/petite-vue
Source: chromecache_107.2.dr	String found in binary or memory: https://utopia.fyi/type/calculator?c=320
Source: chromecache_113.2.dr	String found in binary or memory: https://www.chromestatus.com/features/5093566007214080
Source: chromecache_113.2.dr	String found in binary or memory: https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.85.166.3:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 98.85.166.3:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.49.87:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.172.49.87:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.109:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.109:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.109:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.28.149:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.5.28.149:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.105:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.41.45:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.41.45:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.245.203:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.20:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.205.186.161:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.205.186.161:443 -> 192.168.2.5:49756 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6652_2014846967

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6652_2014846967

Jump to behavior

Source: classification engine

Classification label: mal52.phis.win@24/31@33/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,4257531998769737014,4011222522614677871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2016 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,4257531998769737014,4011222522614677871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3188 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,4257531998769737014,4011222522614677871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2016 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,4257531998769737014,4011222522614677871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3188 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	0%	Avira URL Cloud	safe
https://blog.alexmaccaw.com/css-transitions	0%	Avira URL Cloud	safe
http://blog.jquery.com/2012/08/09/jquery-1-8-released/	0%	Avira URL Cloud	safe
http://pdfmake.org	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/12359	0%	Avira URL Cloud	safe
http://api.jqueryui.com/focusable-selector/	0%	Avira URL Cloud	safe
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	0%	Avira URL Cloud	safe
http://dev.w3.org/csswg/cssom/#resolved-values	0%	Avira URL Cloud	safe
http://api.jqueryui.com/data-selector/	0%	Avira URL Cloud	safe
http://www.datatables.net	0%	Avira URL Cloud	safe
http://jsperf.com/getall-vs-sizzle/2	0%	Avira URL Cloud	safe
http://api.jqueryui.com/controlgroup/	0%	Avira URL Cloud	safe
http://preview.training.knowbe4.com/XbkljYWg5bzZ6WXBCR2JxL0dpWStBV3hZdjJKYzRyVE44S1A5WmNXWitSMUdlNG9	0%	Avira URL Cloud	safe
http://api.jqueryui.com/selectmenu/	0%	Avira URL Cloud	safe
http://api.jqueryui.com/checkboxradio/	0%	Avira URL Cloud	safe
https://modernizr.com/)	0%	Avira URL Cloud	safe
Http://bugs.jqueryui.com/ticket/9446	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/13378	0%	Avira URL Cloud	safe
http://jsperf.com/thor-indexof-vs-for/5	0%	Avira URL Cloud	safe
http://api.jqueryui.com/disableSelection/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3-w.us-east-1.amazonaws.com	3.5.28.149	true	false	high
preview.training.knowbe4.com	52.85.61.6	true	false	unknown
beacons-handoff.gcp.gvt2.com	142.251.186.94	true	false	high
gce-beacons.gcp.gvt2.com	35.236.238.213	true	false	high
www.google.com	142.251.40.228	true	false	high
training.knowbe4.com	52.85.61.109	true	false	high
mail.donotreply.biz	98.85.166.3	true	true	unknown
secured-login.net	35.172.49.87	true	false	high
d1y7k7021numte.cloudfront.net	3.168.102.105	true	false	unknown
cdn4.iconfinder.com	172.66.41.45	true	false	high
unpkg.com	104.17.245.203	true	false	high
helpimg.s3.amazonaws.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
image.pitchbook.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://cdn4.iconfinder.com/data/icons/logos-3/504/SharePoint-512.png	false	high
https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js	false	high
https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866	false	unknown
https://helpimg.s3.amazonaws.com/landing_pages/sei.css	false	high
https://unpkg.com/petite-vue	false	high
https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css	false	high
https://secured-login.net/favicon.ico	false	high
https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_113.2.dr	false		high
https://www.ecma-international.org/news/TC45_current_work/Office%20Open%20XML%20Part%204%20-%20Marku	chromecache_113.2.dr	false		high
http://api.jqueryui.com/slide-effect/	chromecache_113.2.dr	false		high
https://github.com/moment/moment/issues/1423	chromecache_113.2.dr	false		high
http://jqueryui.com/accordion/	chromecache_113.2.dr	false		high
http://api.jqueryui.com/data-selector/	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://chmln.github.io/flatpickr/examples/#flatpickr-external-elements	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://stackoverflow.com/a/32954565/96342	chromecache_113.2.dr	false		high
https://code.google.com/p/chromium/issues/detail?id=378607	chromecache_113.2.dr	false		high
http://stackoverflow.com/a/26707753	chromecache_113.2.dr	false		high
https://github.com/jquery/jquery-color	chromecache_113.2.dr	false		high
http://jqueryui.com/position/	chromecache_113.2.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_113.2.dr	false		high
http://blog.jquery.com/2012/08/09/jquery-1-8-released/	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/focusable-selector/	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://pdfmake.org	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_113.2.dr	false		high
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=107380	chromecache_113.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_113.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_113.2.dr	false		high
https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js	chromecache_112.2.dr	false		high
http://api.jqueryui.com/button/	chromecache_113.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_113.2.dr	false		high
https://blog.alexmaccaw.com/css-transitions	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://www.datatables.net	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/bassjobsen/Bootstrap-3-Typeahead	chromecache_113.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#transitions	chromecache_113.2.dr	false		high
http://api.jqueryui.com/size-effect/	chromecache_113.2.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	chromecache_113.2.dr	false		high
http://bugs.jquery.com/ticket/12359	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/uniqueId/	chromecache_113.2.dr	false		high
http://creativecommons.org/licenses/by/3.0/)	chromecache_113.2.dr	false		high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/checkboxradio/	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_113.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tooltip	chromecache_113.2.dr	false		high
https://github.com/twbs/bootstrap/issues/20280	chromecache_113.2.dr	false		high
http://jqueryui.com/slider/	chromecache_113.2.dr	false		high
https://utopia.fyi/type/calculator?c=320	chromecache_107.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#modals	chromecache_113.2.dr	false		high
http://api.jqueryui.com/disableSelection/	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_113.2.dr	false		high
http://jqueryui.com/controlgroup/	chromecache_113.2.dr	false		high
https://stackoverflow.com/q/181348	chromecache_113.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#collapse	chromecache_113.2.dr	false		high
http://www.macromedia.com/go/getflashplayer	chromecache_113.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#scrollspy	chromecache_113.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_113.2.dr	false		high
http://flightschool.acylt.com/devnotes/caret-position-woes/	chromecache_113.2.dr	false		high
http://api.jqueryui.com/transfer-effect/	chromecache_113.2.dr	false		high
https://github.com/rails/jquery-ujs	chromecache_113.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_113.2.dr	false		high
http://www.robertpenner.com/easing)	chromecache_113.2.dr	false		high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_113.2.dr	false		high
http://jqueryui.com/datepicker/	chromecache_113.2.dr	false		high
Http://bugs.jqueryui.com/ticket/9446	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://code.google.com/p/chromium/issues/detail?id=470258	chromecache_113.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_113.2.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_113.2.dr	false		high
http://datatables.net/license	chromecache_113.2.dr	false		high
http://jsperf.com/getall-vs-sizzle/2	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe	chromecache_113.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#buttons	chromecache_113.2.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_113.2.dr	false		high
http://preview.training.knowbe4.com/XbkljYWg5bzZ6WXBCR2JxL0dpWStBV3hZdjJKYzRyVE44S1A5WmNXWitSMUdlNG9	chromecache_104.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/menu/	chromecache_113.2.dr	false		high
http://jqueryui.com/checkboxradio/	chromecache_113.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#alerts	chromecache_113.2.dr	false		high
http://api.jqueryui.com/controlgroup/	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com/widget/	chromecache_113.2.dr	false		high
http://momentjs.com/guides/#/warnings/define-locale/	chromecache_113.2.dr	false		high
http://api.jqueryui.com/category/effects-core/	chromecache_113.2.dr	false		high
http://api.jqueryui.com/dialog/	chromecache_113.2.dr	false		high
http://jqueryui.com/tooltip/	chromecache_113.2.dr	false		high
https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTl	chromecache_110.2.dr	false		high
http://api.jqueryui.com/selectmenu/	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/shake-effect/	chromecache_113.2.dr	false		high
https://github.com/Microsoft/tslib/blob/v1.6.0/tslib.js	chromecache_113.2.dr	false		high
http://api.jqueryui.com/jQuery.ui.keyCode/	chromecache_113.2.dr	false		high
https://getbootstrap.com/)	chromecache_113.2.dr	false		high
https://modernizr.com/)	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_113.2.dr	false		high
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_113.2.dr	false		high
http://api.jqueryui.com/bounce-effect/	chromecache_113.2.dr	false		high
http://api.jquery.com/jQuery.ajax/)	chromecache_113.2.dr	false		high
https://github.com/moment/moment/blob/2.18.1/src/lib/moment/format.js#L22	chromecache_113.2.dr	false		high
http://bugs.jquery.com/ticket/13378	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
http://jsperf.com/thor-indexof-vs-for/5	chromecache_113.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jashkenas/underscore/blob/1.6.0/underscore.js#L714	chromecache_113.2.dr	false		high
https://github.com/jdewit/bootstrap-timepicker/graphs/contributors	chromecache_113.2.dr	false		high
https://getbootstrap.com/docs/3.4/javascript/#tabs	chromecache_113.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.85.61.109	training.knowbe4.com	United States	16509	AMAZON-02US	false
3.5.28.149	s3-w.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.85.61.20	unknown	United States	16509	AMAZON-02US	false
18.205.186.161	unknown	United States	14618	AMAZON-AESUS	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
98.85.166.3	mail.donotreply.biz	United States	11351	TWC-11351-NORTHEASTUS	true
35.172.49.87	secured-login.net	United States	14618	AMAZON-AESUS	false
3.168.102.105	d1y7k7021numte.cloudfront.net	United States	16509	AMAZON-02US	false
172.66.41.45	cdn4.iconfinder.com	United States	13335	CLOUDFLARENETUS	false
104.17.245.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
52.85.61.6	preview.training.knowbe4.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1645532
Start date and time:	2025-03-21 21:23:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@24/31@33/12

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.227, 142.250.80.110, 142.251.35.174, 172.253.122.84, 142.250.65.206, 142.251.40.142, 142.250.80.78, 142.251.40.110, 142.250.80.46, 199.232.214.172, 142.250.80.99, 142.251.32.99, 184.31.69.3, 20.109.210.53, 65.52.238.100, 150.171.27.10, 23.33.40.139
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14461
Entropy (8bit):	7.842812502576704
Encrypted:	false
SSDEEP:	384:Ze11N7FgHl2pSB3kwrNt4BO0Y7skGikNBQFo:ZagF2YBXaO7GZBQFo
MD5:	7B2AB5CCAC99CAF844258F1EE30A8D17
SHA1:	3D17D39B3A54351CBCE300CB7A9CECDAB3AFCFF6
SHA-256:	2EE7F44847492CA4031EBC9CBFB9E3883DF4E0EF3A148C4E48011B17C5776A1D
SHA-512:	0DCD4AACA73A2A57EDDD1FF6230ECC8BABE7D16E7ECCA71C00E3003CC576C418FD239ADF54FFC2FB0FA32C49088F82D57C7859EF78F22A0479F8F8BBD2A9ECC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x....8DIDATx...1..P..P.......!.C..]C.........GPx.^................................................................................................................0..W.(...X.6Y......w?~..6+.txz....0].._.[,.k.B...F.DQ..~.(........7.!"Z(X.D...O.D..j....J.(.(..{v.X..VV...........b.b.Lv....g.b...1).M5...wb......K.x....+....rw^Ln....{..U.<(.....j.Y..eX..Wb./...j8.yU......N.SC.....@.o..N.Yq.j.....6.dDDD.;.5...1\....)........q.bqN..Y..6#"".w#c.7.y....c6.1_...X<R..r^....o....<d.Iq.b...Xw#1.aJ.8?\L....z.H..z.8"...1.. .tb.^-nj.G;.#....jT...1\..\...n1/.R.g.-#""JY..J....,.a]}.cQ...b\|.:.##""JE^....Z\|HuH{.XR..j..3"".....Z.Q.B.....wu<.k.........ZyX.3..c.%...q.s!......._.OR.....}.^U}...^-.B[..T..l.B...g....J:...X.44d.s.B0E.......Th..Q......1.9...BxI.i.!. ..y..@.bH..mwO..M.q......~?3..a.s.w..{i.e._..n...!.~c."..<./.^.._.yv8B...;J..2.? ."G...Q.m.u.........8?*..F.....mke.....G..Wi.6K....]x(.........w]..]X'..E....':...x.......^..5.4.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 21, 2025 21:24:57.157713890 CET	53	52849	1.1.1.1	192.168.2.5
Mar 21, 2025 21:24:57.158730984 CET	53	64627	1.1.1.1	192.168.2.5
Mar 21, 2025 21:24:58.147825956 CET	53	50543	1.1.1.1	192.168.2.5
Mar 21, 2025 21:24:58.158646107 CET	53	51098	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:01.105739117 CET	57555	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:01.105856895 CET	55827	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:01.204359055 CET	53	57555	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:01.204674006 CET	53	55827	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:02.277565002 CET	52939	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:02.277947903 CET	59302	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:02.386725903 CET	53	52939	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:02.411602020 CET	53	59302	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:03.121817112 CET	63096	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:03.122035027 CET	50059	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:03.270102024 CET	53	50059	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:03.278148890 CET	53	63096	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:05.672589064 CET	58325	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:05.672723055 CET	57478	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:05.674252033 CET	62535	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:05.676690102 CET	54299	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:05.687149048 CET	53172	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:05.687383890 CET	59844	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:05.736141920 CET	58885	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:05.736345053 CET	57438	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:05.777828932 CET	53	62535	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:05.779582024 CET	53	54299	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:05.780180931 CET	53	58325	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:05.793206930 CET	53	59844	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:05.816030025 CET	53	57478	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:05.841316938 CET	53	57438	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:05.841356993 CET	53	53172	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:05.844268084 CET	53	58885	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:06.336577892 CET	58022	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:06.337073088 CET	61085	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:06.438905954 CET	53	61085	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:06.439028025 CET	53	58022	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:07.010144949 CET	51272	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:07.010284901 CET	63353	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:07.111768961 CET	53	63353	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:07.112718105 CET	53	51272	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:08.085362911 CET	57595	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:08.085618019 CET	63720	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:08.187724113 CET	53	57595	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:08.188028097 CET	53	63720	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:10.233622074 CET	57443	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:10.233753920 CET	55311	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:10.396223068 CET	53	57443	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:10.396684885 CET	53	55311	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:15.144526958 CET	53	61244	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:21.807499886 CET	54685	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:21.807746887 CET	65225	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:25:21.915252924 CET	53	65225	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:21.920299053 CET	53	54685	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:34.008843899 CET	53	55847	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:51.986394882 CET	138	138	192.168.2.5	192.168.2.255
Mar 21, 2025 21:25:56.966978073 CET	53	55892	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:57.040647030 CET	53	60332	1.1.1.1	192.168.2.5
Mar 21, 2025 21:25:59.192143917 CET	53	57349	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:11.335030079 CET	62121	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:11.335305929 CET	60229	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:11.437695980 CET	53	60229	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:11.437717915 CET	53	62121	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:12.356081009 CET	55800	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:12.356261969 CET	61592	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:12.456214905 CET	53	55800	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:12.459103107 CET	53	61592	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:14.386957884 CET	57885	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:14.491204023 CET	53	57885	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:15.401956081 CET	57885	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:15.510535002 CET	53	57885	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:16.417421103 CET	57885	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:16.515851021 CET	53	57885	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:18.433223963 CET	57885	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:18.538275003 CET	53	57885	1.1.1.1	192.168.2.5
Mar 21, 2025 21:26:22.448617935 CET	57885	53	192.168.2.5	1.1.1.1
Mar 21, 2025 21:26:22.555522919 CET	53	57885	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 21, 2025 21:24:58.145872116 CET	192.168.2.5	1.1.1.1	c1fa	(Port unreachable)	Destination Unreachable
Mar 21, 2025 21:25:05.816116095 CET	192.168.2.5	1.1.1.1	c26f	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:02 UTC	997	OUT	GET /XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866 HTTP/1.1 Host: mail.donotreply.biz Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:03 UTC	574	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 461 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade ETag: W/"5f766d6b3d416d06b68944c234b26593" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: eab690c6-aeeb-41d7-a52f-63ea1f6a149d X-Runtime: 0.139073 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-03-21 20:25:03 UTC	461	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 64 2d 6c 6f 67 69 6e 2e 6e 65 74 2f 70 61 67 65 73 2f 36 62 65 36 64 35 32 62 30 30 39 30 2f 58 4e 33 52 6a 4e 55 35 7a 65 45 4a 74 53 7a 5a 31 4d 54 46 61 4d 53 39 34 54 48 52 31 4f 54 68 56 51 6c 64 59 55 48 70 4f 4d 32 5a 50 5a 30 78 30 51 79 39 4b 54 6c 67 78 4b 32 30 79 5a 6c 52 71 55 55 6c 56 51 57 6c 75 52 32 64 59 59 32 52 58 61 57 78 76 64 57 6c 31 4e 58 5a 43 62 32 74 58 63 7a 68 35 63 55 35 73 4d 6e 5a 4d 4f 57 56 55 4e 6d 4a 52 64 31 41 35 64 6c 6c 55 63 7a 56 72 56 31 52 45 53 48 56 54 52 54 64 47 5a 48 6b 31 56 7a 52 54 53 57 31 49 5a 55 68 Data Ascii: <html> <head> <script>window.location.href = 'https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:03 UTC	1352	OUT	GET /pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:05 UTC	954	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 77298 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Link: </assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css>; rel=preload; as=style; nopush,</assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css>; rel=preload; as=style; nopush,</assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js>; rel=preload; as=script; nopush ETag: W/"748c108cb30ee21003ecfbc3a6e6cada" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 95ec1569-bd5b-400f-a482-11c38c0fcc9c X-Runtime: 1.722620 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-03-21 20:25:05 UTC	15430	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 49 4d 50 4f 52 54 41 4e 54 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 73 69 6d 75 6c 61 74 65 64 20 70 68 69 73 68 69 6e 67 20 61 74 74 61 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"> <meta name="IMPORTANT" content="This page is part of a simulated phishing attac
2025-03-21 20:25:05 UTC	1570	IN	Data Raw: 49 66 6c 61 67 73 3a 20 27 42 65 72 69 6b 75 74 20 61 64 61 6c 61 68 20 74 61 6e 64 61 20 62 61 68 61 79 61 20 79 61 6e 67 20 74 69 64 61 6b 20 41 6e 64 61 20 73 61 64 61 72 69 3a 27 2c 0a 09 09 09 09 09 09 53 45 49 63 6c 69 63 6b 3a 20 27 53 65 6c 61 6c 75 20 62 65 72 70 69 6b 69 72 20 64 65 6e 67 61 6e 20 62 61 69 6b 2d 62 61 69 6b 20 73 65 62 65 6c 75 6d 20 6d 65 6e 67 65 6b 6c 69 6b 21 27 2c 0a 09 09 09 09 09 09 53 45 49 68 6f 76 65 72 3a 0a 09 09 09 09 09 09 09 27 41 72 61 68 6b 61 6e 20 6b 75 72 73 6f 72 20 6b 65 20 61 74 61 73 20 74 61 6e 64 61 20 62 61 68 61 79 61 20 75 6e 74 75 6b 20 6d 65 6c 69 68 61 74 20 6b 65 74 65 72 61 6e 67 61 6e 3a 27 2c 0a 09 09 09 09 09 09 53 45 49 74 6f 67 67 6c 65 3a 20 27 54 61 6d 70 69 6c 6b 61 6e 2f 73 65 6d 62 75 Data Ascii: Iflags: 'Berikut adalah tanda bahaya yang tidak Anda sadari:',SEIclick: 'Selalu berpikir dengan baik-baik sebelum mengeklik!',SEIhover:'Arahkan kursor ke atas tanda bahaya untuk melihat keterangan:',SEItoggle: 'Tampilkan/sembu
2025-03-21 20:25:05 UTC	16384	IN	Data Raw: 72 61 20 6d 65 72 61 68 20 79 61 6e 67 20 61 6e 64 61 20 74 65 72 6c 65 70 61 73 3a 27 2c 0a 09 09 09 09 09 09 53 45 49 63 6c 69 63 6b 3a 20 27 53 65 6e 74 69 61 73 61 20 66 69 6b 69 72 20 73 65 62 65 6c 75 6d 20 6b 6c 69 6b 21 27 2c 0a 09 09 09 09 09 09 53 45 49 68 6f 76 65 72 3a 0a 09 09 09 09 09 09 09 27 54 75 64 69 6e 67 20 6b 75 72 73 6f 72 20 64 69 20 61 74 61 73 20 62 65 6e 64 65 72 61 20 6d 65 72 61 68 20 75 6e 74 75 6b 20 6d 65 6c 69 68 61 74 20 62 75 74 69 72 61 6e 3a 27 2c 0a 09 09 09 09 09 09 53 45 49 74 6f 67 67 6c 65 3a 20 27 50 61 70 61 72 6b 61 6e 2f 73 65 6d 62 75 6e 79 69 6b 61 6e 20 62 65 6e 64 65 72 61 20 6d 65 72 61 68 27 2c 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 63 73 5f 63 7a 3a 20 7b 0a 09 09 09 09 09 09 70 61 67 65 74 69 74 6c Data Ascii: ra merah yang anda terlepas:',SEIclick: 'Sentiasa fikir sebelum klik!',SEIhover:'Tuding kursor di atas bendera merah untuk melihat butiran:',SEItoggle: 'Paparkan/sembunyikan bendera merah',},cs_cz: {pagetitl
2025-03-21 20:25:05 UTC	16384	IN	Data Raw: 6e 6f 20 61 6c 63 75 6e 20 6c 65 67 61 6d 65 20 63 6f 6e 20 4b 6e 6f 77 42 65 34 2c 20 49 6e 63 2e 20 65 20 6e 6f 6e 20 61 76 61 6c 6c 61 6e 6f 20 69 20 73 65 72 76 69 7a 69 20 64 69 20 4b 6e 6f 77 42 65 34 2c 20 49 6e 63 2e 20 4c 6f 20 73 63 6f 70 6f 20 64 69 20 71 75 65 73 74 6f 20 6d 65 73 73 61 67 67 69 6f 20 c3 a8 20 64 69 6d 6f 73 74 72 61 72 65 20 63 68 65 20 67 6c 69 20 61 74 74 61 63 63 68 69 20 64 69 20 70 68 69 73 68 69 6e 67 20 70 6f 73 73 6f 6e 6f 20 61 76 65 72 65 20 6c 65 20 73 65 6d 62 69 61 6e 7a 65 20 64 69 20 65 2d 6d 61 69 6c 20 6c 65 67 69 74 74 69 6d 65 20 64 61 20 61 7a 69 65 6e 64 65 20 72 69 73 70 65 74 74 61 62 69 6c 69 2e 27 2c 0a 09 09 09 09 09 09 53 45 49 66 6c 61 67 73 3a 0a 09 09 09 09 09 09 09 27 51 75 65 73 74 69 20 73 6f Data Ascii: no alcun legame con KnowBe4, Inc. e non avallano i servizi di KnowBe4, Inc. Lo scopo di questo messaggio dimostrare che gli attacchi di phishing possono avere le sembianze di e-mail legittime da aziende rispettabili.',SEIflags:'Questi so
2025-03-21 20:25:05 UTC	11977	IN	Data Raw: d1 81 d0 bc d0 be d1 82 d1 80 d0 b8 d1 82 d0 b5 20 d0 b2 d0 bd d0 b8 d0 bc d0 b0 d1 82 d0 b5 d0 bb d1 8c d0 bd d0 be 20 d0 b8 20 d0 bf d0 be d0 b4 d1 83 d0 bc d0 b0 d0 b9 d1 82 d0 b5 2e 27 2c 0a 09 09 09 09 09 09 72 75 6c 65 32 3a 20 27 d0 9f d1 80 d0 be d0 b2 d0 b5 d1 80 d1 8c d1 82 d0 b5 2c 20 d0 bd d0 b5 d1 82 20 d0 bb d0 b8 20 d0 b2 20 d0 bf d0 b8 d1 81 d1 8c d0 bc d0 b5 20 d0 bf d1 80 d0 b8 d0 b7 d0 bd d0 b0 d0 ba d0 be d0 b2 20 d1 84 d0 b8 d1 88 d0 b8 d0 bd d0 b3 d0 be d0 b2 d0 be d0 b9 20 d0 b0 d1 82 d0 b0 d0 ba d0 b8 2e 27 2c 0a 09 09 09 09 09 09 72 75 6c 65 33 3a 0a 09 09 09 09 09 09 09 27 d0 a1 d0 b2 d1 8f d0 b6 d0 b8 d1 82 d0 b5 d1 81 d1 8c 20 d1 81 20 d0 bf d1 80 d0 b5 d0 b4 d0 bf d0 be d0 bb d0 b0 d0 b3 d0 b0 d0 b5 d0 bc d1 8b d0 bc 20 d0 be Data Ascii: .',rule2: ', .',rule3:'
2025-03-21 20:25:05 UTC	15553	IN	Data Raw: e0 b8 9b e0 b8 a3 e0 b8 94 e0 b8 88 e0 b8 b3 e0 b9 84 e0 b8 a7 e0 b9 89 e0 b8 a7 e0 b9 88 e0 b8 b2 3a 20 e0 b8 95 e0 b9 89 e0 b8 ad e0 b8 87 e0 b8 a3 e0 b8 b2 e0 b8 a2 e0 b8 87 e0 b8 b2 e0 b8 99 e0 b8 ad e0 b8 b5 e0 b9 80 e0 b8 a1 e0 b8 a5 e0 b8 97 e0 b8 b5 e0 b9 88 e0 b8 99 e0 b9 88 e0 b8 b2 e0 b8 aa e0 b8 87 e0 b8 aa e0 b8 b1 e0 b8 a2 e0 b8 95 e0 b9 88 e0 b8 ad e0 b8 ab e0 b8 b1 e0 b8 a7 e0 b8 ab e0 b8 99 e0 b9 89 e0 b8 b2 e0 b8 87 e0 b8 b2 e0 b8 99 e0 b8 ab e0 b8 a3 e0 b8 b7 e0 b8 ad e0 b8 97 e0 b8 b5 e0 b8 a1 20 49 54 20 e0 b9 80 e0 b8 aa e0 b8 a1 e0 b8 ad 20 e0 b8 ad e0 b8 b2 e0 b8 8a e0 b8 8d e0 b8 b2 e0 b8 81 e0 b8 a3 e0 b9 83 e0 b8 99 e0 b8 ad e0 b8 b4 e0 b8 99 e0 b9 80 e0 b8 97 e0 b8 ad e0 b8 a3 e0 b9 8c e0 b9 80 e0 b8 99 e0 b9 87 e0 b8 95 e0 b8 Data Ascii: : IT

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:05 UTC	965	OUT	GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:05 UTC	263	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:05 GMT Content-Type: text/css Content-Length: 1471 Connection: close Last-Modified: Fri, 21 Mar 2025 14:08:51 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-03-21 20:25:05 UTC	1471	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 31 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 74 65 72 6d 61 72 6b 2e 73 63 73 73 20 2a 2f 0a 2e 77 61 74 65 72 6d 61 72 6b 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 74 62 2d 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 74 65 78 74 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 73 69 64 65 77 61 79 73 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 Data Ascii: /* line 1, app/assets/stylesheets/landing-watermark.scss /.watermark { -webkit-writing-mode: vertical-rl; -ms-writing-mode: tb-rl; writing-mode: vertical-rl; text-orientation: sideways;}/ line 4, app/assets/stylesheets/landing-wa

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:05 UTC	958	OUT	GET /assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	263	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:06 GMT Content-Type: text/css Content-Length: 5934 Connection: close Last-Modified: Fri, 21 Mar 2025 14:08:51 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-03-21 20:25:06 UTC	5934	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 32 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 78 2d 73 65 69 2e 73 65 69 2d 66 6c 61 67 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 6f 6d 61 74 6f 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 36 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 73 65 69 2d 73 74 79 6c 65 73 2e 73 63 73 73 20 2a 2f 0a 78 2d 73 65 69 2e 73 65 69 2d 66 6c 61 67 3a 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 20 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 62 61 63 6b 67 Data Ascii: /* line 2, app/assets/stylesheets/sei-styles.scss /x-sei.sei-flag { border-bottom: 2px solid tomato; padding-left: 3px;}/ line 6, app/assets/stylesheets/sei-styles.scss */x-sei.sei-flag::before { content: ' '; display: inline-block; backg

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:05 UTC	944	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	279	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:06 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Fri, 21 Mar 2025 14:08:51 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-03-21 20:25:06 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-21 20:25:06 UTC	1570	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 21 30 7d 65 6c 73 65 20 77 68 69 6c 65 28 65 3d 65 5b 73 5d 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 63 29 69 66 28 69 3d 65 5b 53 5d 7c 7c 28 65 5b 53 5d 3d 7b 7d 29 2c 75 26 26 66 65 28 65 2c 75 29 29 65 3d 65 5b 73 5d 7c 7c 65 3b 65 6c 73 65 7b 69 66 28 28 72 3d 69 5b 6c 5d 29 26 26 72 5b 30 5d 3d 3d 3d 45 26 26 72 5b 31 5d 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6f 5b 32 5d 3d 72 5b 32 5d 3b 69 66 28 28 69 5b 6c 5d 3d 6f 29 5b 32 5d 3d 61 28 65 2c 74 2c 6e 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 69 29 7b 72 65 74 75 72 6e 20 31 3c 69 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 69 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 69 Data Ascii: !0}else while(e=e[s])if(1===e.nodeType\|\|c)if(i=e[S]\|\|(e[S]={}),u&&fe(e,u))e=e[s]\|\|e;else{if((r=i[l])&&r[0]===E&&r[1]===f)return o[2]=r[2];if((i[l]=o)[2]=a(e,t,n))return!0}return!1}}function K(i){return 1<i.length?function(e,t,n){var r=i.length;while(r--)i
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 6e 5b 31 5d 2b 31 29 2a 6e 5b 32 5d 3a 2b 6e 5b 32 5d 2c 72 26 26 28 72 2e 75 6e 69 74 3d 6c 2c 72 2e 73 74 61 72 74 3d 63 2c 72 2e 65 6e 64 3d 69 29 29 2c 69 7d 76 61 72 20 6e 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 5b 5d 2c 63 3d 30 2c 66 3d 65 2e 6c 65 6e 67 74 68 3b 63 3c 66 3b 63 2b 2b 29 28 72 3d 65 5b 63 5d 29 2e 73 74 79 6c 65 26 26 28 6e 3d 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 2c 74 3f 28 22 6e 6f 6e 65 22 3d 3d 3d 6e 26 26 28 6c 5b 63 5d 3d 5f 2e 67 65 74 28 72 2c 22 64 69 73 70 6c 61 79 22 29 7c 7c 6e 75 6c 6c 2c 6c 5b 63 5d 7c 7c 28 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 22 29 29 2c 22 22 3d 3d 3d 72 2e 73 74 79 6c 65 2e 64 69 Data Ascii: n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=i)),i}var ne={};function re(e,t){for(var n,r,i,o,a,s,u,l=[],c=0,f=e.length;c<f;c++)(r=e[c]).style&&(n=r.style.display,t?("none"===n&&(l[c]=_.get(r,"display")\|\|null,l[c]\|\|(r.style.display="")),""===r.style.di
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 69 6e 4c 65 66 74 29 2c 6c 2e 73 74 79 6c 65 2e 72 69 67 68 74 3d 22 36 30 25 22 2c 6f 3d 33 36 3d 3d 3d 74 28 65 2e 72 69 67 68 74 29 2c 72 3d 33 36 3d 3d 3d 74 28 65 2e 77 69 64 74 68 29 2c 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 69 3d 31 32 3d 3d 3d 74 28 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 2f 33 29 2c 4a 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 75 29 2c 6c 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6c 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 Data Ascii: inLeft),l.style.right="60%",o=36===t(e.right),r=36===t(e.width),l.style.position="absolute",i=12===t(l.offsetWidth/3),J.removeChild(u),l=null}}function t(e){return Math.round(parseFloat(e))}var n,r,i,o,a,s,u=C.createElement("div"),l=C.createElement("div")
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 63 65 28 74 68 69 73 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 43 74 28 74 68 69 73 29 2c 6e 29 2c 6e 29 7d 29 3a 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 73 3f 6e 3f 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 74 29 3a 74 68 69 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 29 3a 28 65 3d 6b 74 28 74 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 29 66 6f 72 28 6f 3d 63 65 28 74 68 69 73 29 2c 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 3d 65 5b 69 5d 2c 6f 2e 68 61 73 43 6c 61 73 73 28 72 29 3f 6f 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 72 29 3a 6f 2e 61 64 64 43 6c 61 73 73 28 72 29 3b 65 6c 73 65 20 76 6f 69 64 Data Ascii: unction(e){ce(this).toggleClass(t.call(this,e,Ct(this),n),n)}):"boolean"==typeof n&&s?n?this.addClass(t):this.removeClass(t):(e=kt(t),this.each(function(){if(s)for(o=ce(this),i=0;i<e.length;i++)r=e[i],o.hasClass(r)?o.removeClass(r):o.addClass(r);else void
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 29 3a 65 29 7d 29 2e 61 6c 77 61 79 73 28 6e 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 6f 7c 7c 5b 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 74 2c 65 5d 29 7d 29 7d 29 2c 74 68 69 73 7d 2c 63 65 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 61 6e 69 6d 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 65 2e 67 72 65 70 28 63 65 2e 74 69 6d 65 72 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 65 6c 65 6d 7d 29 2e 6c 65 6e 67 74 68 7d 2c 63 65 2e 6f 66 66 73 65 74 3d 7b 73 65 74 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 63 Data Ascii: ):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o\|\|[e.responseText,t,e])})}),this},ce.expr.pseudos.animated=function(t){return ce.grep(ce.timers,function(e){return t===e.elem}).length},ce.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=c
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 3d 7b 66 69 74 3a 7b 6c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 65 2e 77 69 74 68 69 6e 2c 73 3d 69 2e 69 73 57 69 6e 64 6f 77 3f 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 3a 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 6e 3d 69 2e 77 69 64 74 68 2c 6f 3d 74 2e 6c 65 66 74 2d 65 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 61 3d 73 2d 6f 2c 72 3d 6f 2b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 6e 2d 73 3b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 3e 6e 3f 30 3c 61 26 26 72 3c 3d 30 3f 28 69 3d 74 2e 6c 65 66 74 2b 61 2b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 6e 2d 73 2c 74 2e 6c 65 66 74 2b 3d 61 2d 69 29 3a 74 2e 6c 65 66 74 3d 21 28 30 3c 72 26 26 61 3c 3d 30 Data Ascii: ={fit:{left:function(t,e){var i=e.within,s=i.isWindow?i.scrollLeft:i.offset.left,n=i.width,o=t.left-e.collisionPosition.marginLeft,a=s-o,r=o+e.collisionWidth-n-s;e.collisionWidth>n?0<a&&r<=0?(i=t.left+a+e.collisionWidth-n-s,t.left+=a-i):t.left=!(0<r&&a<=0
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 22 29 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 3d 5b 28 70 61 72 73 65 49 6e 74 28 65 2e 63 73 73 28 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 29 2c 31 30 29 7c 7c 30 29 2b 28 70 61 72 73 65 49 6e 74 28 65 2e 63 73 73 28 22 70 61 64 64 69 6e 67 4c 65 66 74 22 29 2c 31 30 29 7c 7c 30 29 2c 28 70 61 72 73 65 49 6e 74 28 65 2e 63 73 73 28 22 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 22 29 2c 31 30 29 7c 7c 30 29 2b 28 70 61 72 73 65 49 6e 74 28 65 2e 63 73 73 28 22 70 61 64 64 69 6e 67 54 6f 70 22 29 2c 31 30 29 7c 7c 30 29 2c 28 74 3f 4d 61 74 68 2e 6d 61 78 28 69 2e 73 63 72 6f 6c 6c 57 69 64 74 68 2c 69 2e 6f 66 66 73 65 74 57 69 64 74 68 29 3a 69 2e 6f 66 66 73 65 74 57 69 64 74 68 29 2d 28 70 61 72 73 65 49 Data Ascii: overflow")),this.containment=[(parseInt(e.css("borderLeftWidth"),10)\|\|0)+(parseInt(e.css("paddingLeft"),10)\|\|0),(parseInt(e.css("borderTopWidth"),10)\|\|0)+(parseInt(e.css("paddingTop"),10)\|\|0),(t?Math.max(i.scrollWidth,i.offsetWidth):i.offsetWidth)-(parseI
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 70 70 61 62 6c 65 22 29 2c 74 2e 6f 70 74 69 6f 6e 73 2e 72 65 66 72 65 73 68 50 6f 73 69 74 69 6f 6e 73 7c 7c 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 70 72 65 70 61 72 65 4f 66 66 73 65 74 73 28 74 2c 65 29 7d 7d 29 21 3d 3d 56 2e 75 69 42 61 63 6b 43 6f 6d 70 61 74 26 26 56 2e 77 69 64 67 65 74 28 22 75 69 2e 64 72 6f 70 70 61 62 6c 65 22 2c 56 2e 75 69 2e 64 72 6f 70 70 61 62 6c 65 2c 7b 6f 70 74 69 6f 6e 73 3a 7b 68 6f 76 65 72 43 6c 61 73 73 3a 21 31 2c 61 63 74 69 76 65 43 6c 61 73 73 3a 21 31 7d 2c 5f 61 64 64 41 63 74 69 76 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 73 75 70 65 72 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 63 74 69 76 65 43 6c 61 73 73 26 26 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 64 64 Data Ascii: ppable"),t.options.refreshPositions\|\|V.ui.ddmanager.prepareOffsets(t,e)}})!==V.uiBackCompat&&V.widget("ui.droppable",V.ui.droppable,{options:{hoverClass:!1,activeClass:!1},_addActiveClass:function(){this._super(),this.options.activeClass&&this.element.add

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:05 UTC	980	OUT	GET /assets/application-b8fb25919f68be551e6730684a8ed34bc7dd2dac142e7cc51ebf7b09c48546d5.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	14587	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3205083 Connection: close Date: Fri, 21 Mar 2025 20:25:07 GMT Last-Modified: Thu, 23 May 2024 17:09:54 GMT ETag: "f1232635b40cbfae664ca09ba03fc9c3" x-amz-server-side-encryption: AES256 x-amz-version-id: MxTxI9TWeFRUpLQRLfZiUis0G3owgsQP Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e5bd532dbdee524acdf00690205f3b5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: 8dy3iSj_UVVBFvk4cuSVI0mEe4uKr5ThyBsiXKy9Vs1qPTrFc2upxQ==
2025-03-21 20:25:06 UTC	1797	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 32 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 35 2d 32 30 54 Data Ascii: /! jQuery JavaScript Library v1.12.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright jQuery Foundation and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-05-20T
2025-03-21 20:25:06 UTC	7152	IN	Data Raw: 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 65 6e 68 61 6e 63 65 64 27 0a 09 09 2f 2f 20 4e 65 65 64 20 69 6e 69 74 20 69 66 20 6a 51 75 65 72 79 20 69 73 20 63 61 6c 6c 65 64 20 28 6a 75 73 74 20 61 6c 6c 6f 77 20 65 72 72 6f 72 20 74 6f 20 62 65 20 74 68 72 6f 77 6e 20 69 66 20 6e 6f 74 20 69 6e 63 6c 75 64 65 64 29 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 3c 34 2e 31 2c 20 49 45 3c 39 0a 09 2f 2f 20 4d 61 6b 65 20 73 75 72 65 20 77 65 20 74 Data Ascii: The jQuery object is actually just the init constructor 'enhanced'// Need init if jQuery is called (just allow error to be thrown if not included)return new jQuery.fn.init( selector, context );},// Support: Android<4.1, IE<9// Make sure we t
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 6f 66 74 20 66 6f 72 67 6f 74 20 74 6f 20 68 75 6d 70 20 74 68 65 69 72 20 76 65 6e 64 6f 72 20 70 72 65 66 69 78 20 28 23 39 35 37 32 29 0a 09 63 61 6d 65 6c 43 61 73 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 72 69 6e 67 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 20 72 6d 73 50 72 65 66 69 78 2c 20 22 6d 73 2d 22 20 29 2e 72 65 70 6c 61 63 65 28 20 72 64 61 73 68 41 6c 70 68 61 2c 20 66 63 61 6d 65 6c 43 61 73 65 20 29 3b 0a 09 7d 2c 0a 0a 09 6e 6f 64 65 4e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d Data Ascii: oft forgot to hump their vendor prefix (#9572)camelCase: function( string ) {return string.replace( rmsPrefix, "ms-" ).replace( rdashAlpha, fcamelCase );},nodeName: function( elem, name ) {return elem.nodeName && elem.nodeName.toLowerCase() =
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 6e 20 64 69 66 66 3b 0a 09 7d 0a 0a 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 62 20 66 6f 6c 6c 6f 77 73 20 61 0a 09 69 66 20 28 20 63 75 72 20 29 20 7b 0a 09 09 77 68 69 6c 65 20 28 20 28 63 75 72 20 3d 20 63 75 72 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 20 29 20 7b 0a 09 09 09 69 66 20 28 20 63 75 72 20 3d 3d 3d 20 62 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 2d 31 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 72 65 74 75 72 6e 20 61 20 3f 20 31 20 3a 20 2d 31 3b 0a 7d 0a 0a 2f 2a 2a 0a 20 2a 20 52 65 74 75 72 6e 73 20 61 20 66 75 6e 63 74 69 6f 6e 20 74 6f 20 75 73 65 20 69 6e 20 70 73 65 75 64 6f 73 20 66 6f 72 20 69 6e 70 75 74 20 74 79 70 65 73 0a 20 2a 20 40 70 61 72 61 6d 20 7b 53 74 72 69 6e 67 7d 20 74 79 70 65 0a 20 2a 2f 0a 66 75 6e 63 74 Data Ascii: n diff;}// Check if b follows aif ( cur ) {while ( (cur = cur.nextSibling) ) {if ( cur === b ) {return -1;}}}return a ? 1 : -1;}/** * Returns a function to use in pseudos for input types * @param {String} type */funct
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 73 20 28 6a 51 75 65 72 79 20 23 31 31 31 35 33 29 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 65 6c 65 6d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 2f 2f 20 54 72 61 76 65 72 73 65 20 69 74 73 20 63 68 69 6c 64 72 65 6e 0a 09 09 09 66 6f 72 20 28 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 66 69 72 73 74 43 68 69 6c 64 3b 20 65 6c 65 6d 3b 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 2e 6e 65 78 74 53 69 62 6c 69 6e 67 20 29 20 7b 0a 09 09 09 09 72 65 74 20 2b 3d 20 67 65 74 54 65 78 74 28 20 65 6c 65 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 20 65 6c 73 65 20 69 66 20 28 20 6e 6f 64 65 54 Data Ascii: s (jQuery #11153)if ( typeof elem.textContent === "string" ) {return elem.textContent;} else {// Traverse its childrenfor ( elem = elem.firstChild; elem; elem = elem.nextSibling ) {ret += getText( elem );}}} else if ( nodeT
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 29 3b 0a 09 09 09 74 6f 6b 65 6e 73 2e 70 75 73 68 28 7b 0a 09 09 09 09 76 61 6c 75 65 3a 20 6d 61 74 63 68 65 64 2c 0a 09 09 09 09 2f 2f 20 43 61 73 74 20 64 65 73 63 65 6e 64 61 6e 74 20 63 6f 6d 62 69 6e 61 74 6f 72 73 20 74 6f 20 73 70 61 63 65 0a 09 09 09 09 74 79 70 65 3a 20 6d 61 74 63 68 5b 30 5d 2e 72 65 70 6c 61 63 65 28 20 72 74 72 69 6d 2c 20 22 20 22 20 29 0a 09 09 09 7d 29 3b 0a 09 09 09 73 6f 46 61 72 20 3d 20 73 6f 46 61 72 2e 73 6c 69 63 65 28 20 6d 61 74 63 68 65 64 2e 6c 65 6e 67 74 68 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 46 69 6c 74 65 72 73 0a 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 45 78 70 72 2e 66 69 6c 74 65 72 20 29 20 7b 0a 09 09 09 69 66 20 28 20 28 6d 61 74 63 68 20 3d 20 6d 61 74 63 68 45 78 70 72 5b 20 74 79 70 Data Ascii: );tokens.push({value: matched,// Cast descendant combinators to spacetype: match[0].replace( rtrim, " " )});soFar = soFar.slice( matched.length );}// Filtersfor ( type in Expr.filter ) {if ( (match = matchExpr[ typ
2025-03-21 20:25:06 UTC	15005	IN	Data Raw: 69 73 58 4d 4c 20 29 20 7b 0a 09 09 69 66 20 28 20 21 69 73 58 4d 4c 20 26 26 20 65 6c 65 6d 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 22 69 6e 70 75 74 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 65 6c 65 6d 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0a 09 09 7d 0a 09 7d 29 3b 0a 7d 0a 0a 2f 2f 20 53 75 70 70 6f 72 74 3a 20 49 45 3c 39 0a 2f 2f 20 55 73 65 20 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 20 74 6f 20 66 65 74 63 68 20 62 6f 6f 6c 65 61 6e 73 20 77 68 65 6e 20 67 65 74 41 74 74 72 69 62 75 74 65 20 6c 69 65 73 0a 69 66 20 28 20 21 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 64 69 76 20 29 20 7b 0a 09 72 65 74 75 72 6e 20 64 69 76 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 Data Ascii: isXML ) {if ( !isXML && elem.nodeName.toLowerCase() === "input" ) {return elem.defaultValue;}});}// Support: IE<9// Use getAttributeNode to fetch booleans when getAttribute liesif ( !assert(function( div ) {return div.getAttribute("disa
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 63 65 28 20 69 6e 64 65 78 2c 20 31 20 29 3b 0a 0a 09 09 09 09 09 09 2f 2f 20 48 61 6e 64 6c 65 20 66 69 72 69 6e 67 20 69 6e 64 65 78 65 73 0a 09 09 09 09 09 09 69 66 20 28 20 69 6e 64 65 78 20 3c 3d 20 66 69 72 69 6e 67 49 6e 64 65 78 20 29 20 7b 0a 09 09 09 09 09 09 09 66 69 72 69 6e 67 49 6e 64 65 78 2d 2d 3b 0a 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 20 29 3b 0a 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 7d 2c 0a 0a 09 09 09 2f 2f 20 43 68 65 63 6b 20 69 66 20 61 20 67 69 76 65 6e 20 63 61 6c 6c 62 61 63 6b 20 69 73 20 69 6e 20 74 68 65 20 6c 69 73 74 2e 0a 09 09 09 2f 2f 20 49 66 20 6e 6f 20 61 72 67 75 6d 65 6e 74 20 69 73 20 67 69 76 65 6e 2c 20 72 65 74 75 72 6e 20 77 68 65 74 68 65 72 20 6f 72 20 6e 6f 74 20 Data Ascii: ce( index, 1 );// Handle firing indexesif ( index <= firingIndex ) {firingIndex--;}}} );return this;},// Check if a given callback is in the list.// If no argument is given, return whether or not
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 09 09 6e 61 6d 65 20 3d 20 5b 20 6e 61 6d 65 20 5d 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 0a 09 09 09 09 09 2f 2f 20 73 70 6c 69 74 20 74 68 65 20 63 61 6d 65 6c 20 63 61 73 65 64 20 76 65 72 73 69 6f 6e 20 62 79 20 73 70 61 63 65 73 20 75 6e 6c 65 73 73 20 61 20 6b 65 79 20 77 69 74 68 20 74 68 65 20 73 70 61 63 65 73 20 65 78 69 73 74 73 0a 09 09 09 09 09 6e 61 6d 65 20 3d 20 6a 51 75 65 72 79 2e 63 61 6d 65 6c 43 61 73 65 28 20 6e 61 6d 65 20 29 3b 0a 09 09 09 09 09 69 66 20 28 20 6e 61 6d 65 20 69 6e 20 74 68 69 73 43 61 63 68 65 20 29 20 7b 0a 09 09 09 09 09 09 6e 61 6d 65 20 3d 20 5b 20 6e 61 6d 65 20 5d 3b 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 6e 61 6d 65 20 3d 20 6e 61 6d 65 2e 73 70 6c 69 74 28 20 22 20 22 20 29 3b Data Ascii: name = [ name ];} else {// split the camel cased version by spaces unless a key with the spaces existsname = jQuery.camelCase( name );if ( name in thisCache ) {name = [ name ];} else {name = name.split( " " );
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 45 76 61 6c 28 20 65 6c 65 6d 73 2c 20 72 65 66 45 6c 65 6d 65 6e 74 73 20 29 20 7b 0a 09 76 61 72 20 65 6c 65 6d 2c 0a 09 09 69 20 3d 20 30 3b 0a 09 66 6f 72 20 28 20 3b 20 28 20 65 6c 65 6d 20 3d 20 65 6c 65 6d 73 5b 20 69 20 5d 20 29 20 21 3d 20 6e 75 6c 6c 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 0a 09 09 09 65 6c 65 6d 2c 0a 09 09 09 22 67 6c 6f 62 61 6c 45 76 61 6c 22 2c 0a 09 09 09 21 72 65 66 45 6c 65 6d 65 6e 74 73 20 7c 7c 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 72 65 66 45 6c 65 6d 65 6e 74 73 5b 20 69 20 5d 2c 20 22 67 6c 6f 62 61 6c 45 76 61 6c 22 20 29 0a 09 09 29 3b 0a 09 7d 0a 7d 0a 0a 0a 76 61 72 20 72 68 74 6d 6c 20 3d 20 2f 3c 7c 26 23 3f 5c 77 2b 3b 2f 2c 0a 09 72 74 62 6f 64 79 20 3d 20 2f 3c 74 Data Ascii: Eval( elems, refElements ) {var elem,i = 0;for ( ; ( elem = elems[ i ] ) != null; i++ ) {jQuery._data(elem,"globalEval",!refElements \|\| jQuery._data( refElements[ i ], "globalEval" ));}}var rhtml = /<\|&#?\w+;/,rtbody = /<t

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:05 UTC	933	OUT	GET /packs/js/vendor-954761ad0dceb106b971.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	14588	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1762 Connection: close Last-Modified: Fri, 21 Mar 2025 16:39:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: csleklqOrhlvMFz7IpKnX1B7p46MqiFy Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Date: Fri, 21 Mar 2025 20:25:06 GMT ETag: "7d05064a9a97540a52b4b4c0d3b6a2d0" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 6f9ef5ae165c9835aa6935d9fb7e2072.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: QTMUYg0-mlMZDHpL3TPqoEn2-EgZyChf6BUC5MCI_xmkti5JBOgfEA== Age: 12

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:05 UTC	978	OUT	GET /assets/modernizr-79e0181ec91aff04bb01d87cba546535ede843f75d19f5c60f66b8dd6546971f.js HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	14585	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 51364 Connection: close Date: Fri, 21 Mar 2025 20:25:07 GMT Last-Modified: Thu, 23 May 2024 17:10:02 GMT ETag: "bf2f96e6233de3d8c0346085ac28248a" x-amz-server-side-encryption: AES256 x-amz-version-id: RZAGGokfellBSB91hGWLp0WOKAUihfUC Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c45a9630d6506aeeffefe81fbc0ed0ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: L9rT979YE_46ijFDBJpzmPKlOsBYkAMdzkbdUVVK4x6T4XBg8UcJOQ==
2025-03-21 20:25:06 UTC	1382	IN	Data Raw: 2f 2a 21 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 76 32 2e 37 2e 31 0a 20 2a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 72 75 6b 20 41 74 65 73 2c 20 50 61 75 6c 20 49 72 69 73 68 2c 20 41 6c 65 78 20 53 65 78 74 6f 6e 0a 20 2a 20 41 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 61 6e 64 20 4d 49 54 20 6c 69 63 65 6e 73 65 73 3a 20 77 77 77 2e 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 0a 20 2a 2f 0a 0a 2f 2a 0a 20 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 74 65 73 74 73 20 77 68 69 63 68 20 6e 61 74 69 76 65 20 43 53 53 33 20 61 6e 64 20 48 54 4d 4c 35 20 66 65 61 74 75 72 65 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 69 6e 0a 20 Data Ascii: /! Modernizr v2.7.1 * www.modernizr.com * * Copyright (c) Faruk Ates, Paul Irish, Alex Sexton * Available under the BSD and MIT licenses: www.modernizr.com/license/ // * Modernizr tests which native CSS3 and HTML5 features are available in
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 20 20 2a 20 43 72 65 61 74 65 20 74 68 65 20 69 6e 70 75 74 20 65 6c 65 6d 65 6e 74 20 66 6f 72 20 76 61 72 69 6f 75 73 20 57 65 62 20 46 6f 72 6d 73 20 66 65 61 74 75 72 65 20 74 65 73 74 73 2e 0a 20 20 20 20 20 2a 2f 0a 20 20 20 20 69 6e 70 75 74 45 6c 65 6d 20 2f 2a 3e 3e 69 6e 70 75 74 65 6c 65 6d 2a 2f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6e 70 75 74 27 29 20 2f 2a 3e 3e 69 6e 70 75 74 65 6c 65 6d 2a 2f 20 2c 0a 0a 20 20 20 20 2f 2a 3e 3e 73 6d 69 6c 65 2a 2f 0a 20 20 20 20 73 6d 69 6c 65 20 3d 20 27 3a 29 27 2c 0a 20 20 20 20 2f 2a 3e 3e 73 6d 69 6c 65 2a 2f 0a 0a 20 20 20 20 74 6f 53 74 72 69 6e 67 20 3d 20 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 0a 0a 20 20 20 20 2f 2f 20 54 4f 44 4f 20 3a 3a 20 6d 61 6b Data Ascii: * Create the input element for various Web Forms feature tests. / inputElem />>inputelem/ = document.createElement('input') />>inputelem/ , />>smile/ smile = ':)', />>smile*/ toString = {}.toString, // TODO :: mak
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 27 4d 6f 7a 57 65 62 53 6f 63 6b 65 74 27 20 69 6e 20 77 69 6e 64 6f 77 3b 0a 20 20 20 20 7d 3b 0a 0a 0a 20 20 20 20 2f 2f 20 63 73 73 2d 74 72 69 63 6b 73 2e 63 6f 6d 2f 72 67 62 61 2d 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 2f 0a 20 20 20 20 74 65 73 74 73 5b 27 72 67 62 61 27 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 53 65 74 20 61 6e 20 72 67 62 61 28 29 20 63 6f 6c 6f 72 20 61 6e 64 20 63 68 65 63 6b 20 74 68 65 20 72 65 74 75 72 6e 65 64 20 76 61 6c 75 65 0a 0a 20 20 20 20 20 20 20 20 73 65 74 43 73 73 28 27 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 31 35 30 2c 32 35 35 2c 31 35 30 2c 2e 35 29 27 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 6f 6e 74 61 69 6e 73 28 Data Ascii: 'MozWebSocket' in window; }; // css-tricks.com/rgba-browser-support/ tests['rgba'] = function() { // Set an rgba() color and check the returned value setCss('background-color:rgba(150,255,150,.5)'); return contains(
2025-03-21 20:25:06 UTC	16384	IN	Data Raw: 61 74 75 72 65 4e 61 6d 65 5d 20 3d 20 74 65 73 74 73 5b 66 65 61 74 75 72 65 5d 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 65 73 2e 70 75 73 68 28 28 4d 6f 64 65 72 6e 69 7a 72 5b 66 65 61 74 75 72 65 4e 61 6d 65 5d 20 3f 20 27 27 20 3a 20 27 6e 6f 2d 27 29 20 2b 20 66 65 61 74 75 72 65 4e 61 6d 65 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2f 2a 3e 3e 77 65 62 66 6f 72 6d 73 2a 2f 0a 20 20 20 20 2f 2f 20 69 6e 70 75 74 20 74 65 73 74 73 20 6e 65 65 64 20 74 6f 20 72 75 6e 2e 0a 20 20 20 20 4d 6f 64 65 72 6e 69 7a 72 2e 69 6e 70 75 74 20 7c 7c 20 77 65 62 66 6f 72 6d 73 28 29 3b 0a 20 20 20 20 2f 2a 3e 3e 77 65 62 66 6f 72 6d 73 2a 2f 0a 0a 0a 20 20 20 20 2f 2a 2a 0a 20 20 20 20 20 2a 20 61 64 64 54 65 Data Ascii: atureName] = tests[feature](); classes.push((Modernizr[featureName] ? '' : 'no-') + featureName); } } />>webforms/ // input tests need to run. Modernizr.input \|\| webforms(); />>webforms/ /** * addTe
2025-03-21 20:25:06 UTC	830	IN	Data Raw: 0a 20 20 20 20 2f 2f 20 20 20 20 20 7d 2c 0a 20 20 20 20 2f 2f 20 20 20 20 20 74 72 61 6e 73 45 6e 64 45 76 65 6e 74 4e 61 6d 65 20 3d 20 74 72 61 6e 73 45 6e 64 45 76 65 6e 74 4e 61 6d 65 73 5b 20 4d 6f 64 65 72 6e 69 7a 72 2e 70 72 65 66 69 78 65 64 28 27 74 72 61 6e 73 69 74 69 6f 6e 27 29 20 5d 3b 0a 0a 20 20 20 20 4d 6f 64 65 72 6e 69 7a 72 2e 70 72 65 66 69 78 65 64 20 20 20 20 20 20 3d 20 66 75 6e 63 74 69 6f 6e 28 70 72 6f 70 2c 20 6f 62 6a 2c 20 65 6c 65 6d 29 7b 0a 20 20 20 20 20 20 69 66 28 21 6f 62 6a 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 65 73 74 50 72 6f 70 73 41 6c 6c 28 70 72 6f 70 2c 20 27 70 66 78 27 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 2f 2f 20 54 65 73 74 69 6e 67 20 44 4f Data Ascii: // }, // transEndEventName = transEndEventNames[ Modernizr.prefixed('transition') ]; Modernizr.prefixed = function(prop, obj, elem){ if(!obj) { return testPropsAll(prop, 'pfx'); } else { // Testing DO

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (382)
Category:	downloaded
Size (bytes):	77298
Entropy (8bit):	6.1447132509503275
Encrypted:	false
SSDEEP:	1536:arvhXL0e1F6mB10lpnWNW+mzx0rEOAZf1A0fjrCudwJot:abhXL0e1F6mB10lpnWNGzx0AOA913fjt
MD5:	0312A90CBBEC5449494E073DC6EEABA4
SHA1:	E2D4FD8333705109B73613FC896843C5CE995E60
SHA-256:	748C108CB30EE21003ECFBC3A6E6CADAA921D1E539FFBBB7D86555DF33E383AF
SHA-512:	F34740DDBB6BBACBD2637B5C8D1596621862862DD40DF7756C80408F37709FBEE7527913A94E8298AC06C23FC2663B206E61B54789D70922EB397AC6445D703E
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js"></script>.. <link rel="stylesheet" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css" media="all" />. <link rel="stylesheet" href="/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css" media="all" />.. <script>.//<![CDATA[.. $(document).ready(function() {.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5649
Entropy (8bit):	5.250605215538956
Encrypted:	false
SSDEEP:	96:KGJW/OplIczjJxwvcS2dOCERJ7EnXKEh9sk4QfkOtjt:T1Ickv9RJ7SKesk4Qfk+
MD5:	B13B4F098D80AC49DCC6BED4E459D560
SHA1:	81FFB3DD594A82F9453D1C45DA812DFC008CAA65
SHA-256:	5FC2013E8D4F5A97667A0A5BFEF9A2E148363D89A46BE49F14CB2C60B1461CA9
SHA-512:	4FEAEA5336B3E1B7B1D26C5D576C655208955D4C7657B967D11A9D58A3086EB0D087DE53606E0AC4E0F3AEFD9993E616BD7B9B343AE23DEB20477BD7EFD75ECC
Malicious:	false
Reputation:	low
URL:	https://helpimg.s3.amazonaws.com/landing_pages/oops/styles.css
Preview:	:root {..--clr-neutral-100: #ffffff;..--clr-neutral-200: #f5f5f5;..--clr-neutral-300: #d5d5d5;..--clr-neutral-400: #ababab;..--clr-neutral-500: #707070;..--clr-neutral-600: #2c2c2c;.../* Padding /..--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);..--padding-sm: clamp(1rem, 3%, 1.5rem);..--padding-md: clamp(1.5rem, 6%, 3rem);..--padding-lg: clamp(3rem, 12%, 6rem);.../ Margin /..--block-flow-xs: min(1rem, 2vh);..--block-flow-sm: min(2rem, 4vh);..--block-flow-md: min(4rem, 8vh);..--block-flow-lg: min(8rem, 16vh);.../ Font Sizes /.../ @link https://utopia.fyi/type/calculator?c=320,18,1.2,1240,20,1.25,5,2,&s=0.75\|0.5\|0.25,1.5\|2\|3\|4\|6,s-l&g=s,l,xl,12 /.../ Step -1: 15px . 12.003px /..--step--1: clamp(0.7502rem, 1.0027rem + -0.3258vi, 0.9375rem);../ Step 0: 18px . 16px /..--step-0: clamp(1rem, 1.1685rem + -0.2174vi, 1.125rem);../ Step 1: 21.6px . 21.328px /..--step-1: clamp(1.333rem, 1.3559rem + -0.0296vi, 1.35rem);../ Step 2: 25.92px . 28.4302px */..--step-2: clamp(1.62rem,

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16900)
Category:	downloaded
Size (bytes):	16901
Entropy (8bit):	5.207509946311759
Encrypted:	false
SSDEEP:	384:56N7rvrXsqsgs94SzHhjVBvGg0Rr15uH9oSbH9XRZrclZprFjCx9VXU5G7Cqbt/p:AN7brXT3gfzHhjVBvL0RrTujhZrclZpy
MD5:	A7DB3244C9A6704A3159A38C82207F66
SHA1:	CC3B2BF9D2FCC718C86B1ED2AC7D9CD5BA12EF43
SHA-256:	774BB8E88B09936246A57F0DFED88A375258A8235B893561C96880411DABC4D5
SHA-512:	3197FFB1055735A329D122D6C8EDFA9C12FCCD54E8F22F579A4E79B3C6AE0163391E790429A3F680434309AAECCE1572941EA47DEE321AC080FEAADA2DE3F3B6
Malicious:	false
Reputation:	low
URL:	https://unpkg.com/petite-vue@0.4.1/dist/petite-vue.iife.js
Preview:	var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length;s++){const i=e[s],o=d(i)?r(i):t(i);if(o)for(const e in o)n[e]=o[e]}return n}return d(e)\|\|g(e)?e:void 0}const n=/;(?![^(]*\))/g,s=/:(.+)/;function r(e){const t={};return e.split(n).forEach((e=>{if(e){const n=e.split(s);n.length>1&&(t[n[0].trim()]=n[1].trim())}})),t}function i(e){let t="";if(d(e))t=e;else if(a(e))for(let n=0;n<e.length;n++){const s=i(e[n]);s&&(t+=s+" ")}else if(g(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}function o(e,t){if(e===t)return!0;let n=h(e),s=h(t);if(n\|\|s)return!(!n\|\|!s)&&e.getTime()===t.getTime();if(n=a(e),s=a(t),n\|\|s)return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.k

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:06 UTC	941	OUT	GET /landing_pages/oops/styles.css HTTP/1.1 Host: helpimg.s3.amazonaws.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	534	IN	HTTP/1.1 200 OK x-amz-id-2: rpneRArTCyC3DiPLRAT0sO/na21DS1t8lgzOjH/ycpP5S8XirgH50/Svil7V6EFlwc7oz7G3FRb26b/Pg7TkGbLOr4H0M23l/rGbX/60Rxg= x-amz-request-id: AWA6ERB47PMT90GB Date: Fri, 21 Mar 2025 20:25:07 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 05 Dec 2024 22:09:56 GMT ETag: "b13b4f098d80ac49dcc6bed4e459d560" x-amz-server-side-encryption: AES256 x-amz-version-id: euN8e1egT0HP5Qpqr.UG1XrfZxMZiG5f Accept-Ranges: bytes Content-Type: text/css Content-Length: 5649 Server: AmazonS3 Connection: close
2025-03-21 20:25:06 UTC	5649	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 31 30 30 3a 20 23 66 66 66 66 66 66 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 32 30 30 3a 20 23 66 35 66 35 66 35 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 33 30 30 3a 20 23 64 35 64 35 64 35 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 34 30 30 3a 20 23 61 62 61 62 61 62 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 35 30 30 3a 20 23 37 30 37 30 37 30 3b 0a 09 2d 2d 63 6c 72 2d 6e 65 75 74 72 61 6c 2d 36 30 30 3a 20 23 32 63 32 63 32 63 3b 0a 0a 09 2f 2a 20 50 61 64 64 69 6e 67 20 2a 2f 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 78 73 3a 20 63 6c 61 6d 70 28 30 2e 35 72 65 6d 2c 20 31 2e 35 25 2c 20 30 2e 37 35 72 65 6d 29 3b 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 73 Data Ascii: :root {--clr-neutral-100: #ffffff;--clr-neutral-200: #f5f5f5;--clr-neutral-300: #d5d5d5;--clr-neutral-400: #ababab;--clr-neutral-500: #707070;--clr-neutral-600: #2c2c2c;/* Padding */--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);--padding-s

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:06 UTC	933	OUT	GET /landing_pages/sei.css HTTP/1.1 Host: helpimg.s3.amazonaws.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	534	IN	HTTP/1.1 200 OK x-amz-id-2: uyeNCyBK+L5h9NLgeEu9yAjkl30oOXklV5iM2w/UZ2XHLFAFOZCCpq3zriykacGaRuDi5zmE7mBA55ZRRvktRGgdFGYuX6VlR+jVXFDzrhY= x-amz-request-id: AWA6J2TXWSFFZW3V Date: Fri, 21 Mar 2025 20:25:07 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 09 Jul 2024 21:15:25 GMT ETag: "692bd85875571661ef543e40d70685f5" x-amz-server-side-encryption: AES256 x-amz-version-id: 3UdJ2XKf2hy.B2MbSABVimIf.72dTXZF Accept-Ranges: bytes Content-Type: text/css Content-Length: 2508 Server: AmazonS3 Connection: close
2025-03-21 20:25:06 UTC	2508	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 09 2f 2a 20 50 61 64 64 69 6e 67 20 2a 2f 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 78 73 3a 20 63 6c 61 6d 70 28 30 2e 35 72 65 6d 2c 20 31 2e 35 25 2c 20 30 2e 37 35 72 65 6d 29 3b 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 73 6d 3a 20 63 6c 61 6d 70 28 31 72 65 6d 2c 20 33 25 2c 20 31 2e 35 72 65 6d 29 3b 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 6d 64 3a 20 63 6c 61 6d 70 28 31 2e 35 72 65 6d 2c 20 36 25 2c 20 33 72 65 6d 29 3b 0a 09 2d 2d 70 61 64 64 69 6e 67 2d 6c 67 3a 20 63 6c 61 6d 70 28 33 72 65 6d 2c 20 31 32 25 2c 20 36 72 65 6d 29 3b 0a 0a 09 2f 2a 20 4d 61 72 67 69 6e 20 2a 2f 0a 09 2d 2d 62 6c 6f 63 6b 2d 66 6c 6f 77 2d 78 73 3a 20 6d 69 6e 28 31 72 65 6d 2c 20 32 76 68 29 3b 0a 09 2d 2d 62 6c 6f 63 6b 2d 66 6c 6f 77 2d 73 6d 3a 20 6d Data Ascii: :root {/* Padding /--padding-xs: clamp(0.5rem, 1.5%, 0.75rem);--padding-sm: clamp(1rem, 3%, 1.5rem);--padding-md: clamp(1.5rem, 6%, 3rem);--padding-lg: clamp(3rem, 12%, 6rem);/ Margin */--block-flow-xs: min(1rem, 2vh);--block-flow-sm: m

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:06 UTC	1001	OUT	GET /kpbGtMkYJ791HJmrStEqcO324kp1630523335412_200x200 HTTP/1.1 Host: image.pitchbook.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	732	IN	HTTP/1.1 404 Not Found Content-Type: application/xml Transfer-Encoding: chunked Connection: close x-amz-delete-marker: true x-amz-version-id: Mnf2RktQImrCptyABtHnrPzNSOC7NdU. Date: Fri, 21 Mar 2025 20:25:05 GMT Server: AmazonS3 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Security-Policy: default-src 'self'; font-src data: 'self' X-Content-Type-Options: nosniff X-Frame-Options: sameorigin X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin X-Cache: Error from cloudfront Via: 1.1 d6e8d455c6249e06c531b544b92279c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P6 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6wZ9qa5VfO0dzIom8-rsK5lomR_g2lq-5FGEF4R7mSHmevgHQl54TA==
2025-03-21 20:25:06 UTC	326	IN	Data Raw: 31 33 66 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 4b 65 79 3e 6b 70 62 47 74 4d 6b 59 4a 37 39 31 48 4a 6d 72 53 74 45 71 63 4f 33 32 34 6b 70 31 36 33 30 35 32 33 33 33 35 34 31 32 5f 32 30 30 78 32 30 30 3c 2f 4b 65 79 3e 3c 52 65 71 75 65 73 74 49 64 3e 41 57 41 36 46 41 31 41 36 54 48 57 51 31 33 36 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 73 52 7a 71 62 4e 43 46 64 53 30 74 4d 74 4f 6e 64 77 73 33 31 51 31 62 Data Ascii: 13f<?xml version="1.0" encoding="UTF-8"?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message><Key>kpbGtMkYJ791HJmrStEqcO324kp1630523335412_200x200</Key><RequestId>AWA6FA1A6THWQ136</RequestId><HostId>sRzqbNCFdS0tMtOndws31Q1b
2025-03-21 20:25:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:06 UTC	994	OUT	GET /data/icons/logos-3/504/SharePoint-512.png HTTP/1.1 Host: cdn4.iconfinder.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:06 UTC	1243	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:06 GMT Content-Type: image/webp Content-Length: 7714 Connection: close Access-Control-Allow-Origin: * Age: 688993 Cache-Control: public, max-age=31536000 Cf-Bgj: imgq:100,h2pri Cf-Polished: origFmt=png, origSize=15836 Content-Disposition: inline; filename="SharePoint-512.webp" Expires: Sat, 21 Mar 2026 20:25:06 GMT Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1741100484&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=%2FiXXDYC1FsMLY6oZ1IEl2M8WOOPn%2BrKTVyND46ykP88%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1741100484&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=%2FiXXDYC1FsMLY6oZ1IEl2M8WOOPn%2BrKTVyND46ykP88%3D Vary: Accept Via: 1.1 vegur X-Request-Id: ff69783f-828f-4dbe-a6e7-5230346045b4 last-modified: Tue, 04 Mar 2025 15:01:24 GMT CF-Cache-Status: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 92402d35fb89421d-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 20:25:06 UTC	126	IN	Data Raw: 52 49 46 46 1a 1e 00 00 57 45 42 50 56 50 38 4c 0d 1e 00 00 2f ff c1 7f 10 55 61 7e f6 6f dd e5 36 f3 4f 66 c7 3e cf f3 0e d8 61 66 66 66 66 66 66 66 66 66 66 30 86 39 39 7e df f7 fc de e7 fb 7d 9e 77 35 cf 26 30 db c0 44 9c d8 65 a6 29 5a 3a 61 66 28 4d 57 41 93 54 e6 f6 c8 d2 c8 3a 13 9e 32 2c 19 c2 5c 6e 8f 61 61 2b 1c 2f 03 76 c9 3a 59 1c 6f ca cc cc cc b3 2d 4c ca bc e5 Data Ascii: RIFFWEBPVP8L/Ua~o6Of>affffffffff099~}w5&0De)Z:af(MWAT:2,\naa+/v:Yo-L
2025-03-21 20:25:06 UTC	1369	IN	Data Raw: 36 68 8d bd 08 af 78 5c 66 f6 6a a2 51 98 b3 2c 4c 36 cc 13 45 b6 8b e3 2a 4c 96 82 ab 91 ca 6d 98 99 93 53 0e 59 fe 0b c2 8c 65 0e 73 32 d9 95 c1 d6 e8 48 e1 58 c7 3e c5 70 66 5d 66 1e 29 e0 bf c1 92 57 59 95 1f ef 26 a7 3c ab 4a cc 4c 93 48 5f 4b 2e b7 e1 ac 0a 8e cb dc 5a 13 26 db a5 33 45 6b a4 e2 91 35 9b 32 59 76 98 b1 93 55 b9 67 55 65 34 3a 53 b0 34 23 4d b6 64 65 57 66 86 f1 68 46 65 46 8b 96 24 c9 8a 24 29 af be 37 db 3f 4e c9 74 f3 f7 8a 99 99 f9 65 55 52 b7 6d 6d 69 73 11 85 a4 16 ad bb bb d1 c6 85 18 bc 7b 3d 94 7e 76 7e 9e fb bf 8c 52 c0 b6 ed f8 d7 fc fe d9 b6 6d db b6 6d db b6 dd bc e5 e6 38 67 db b6 dd 5f 73 fb 7d ff 39 77 4e 80 8e e9 ff 98 fe 8f e9 ff 98 fe 8f e9 ff 98 fe 8f e9 7f 05 d8 d4 ae 12 47 b7 a5 2d a8 95 65 6b 8a 2d 5f d4 22 2e Data Ascii: 6hx\fjQ,L6E*LmSYes2HX>pf]f)WY&<JLH_K.Z&3Ek52YvUgUe4:S4#MdeWfhFeF$$)7?NteURmmis{=~v~Rmm8g_s}9wNG-ek-_".
2025-03-21 20:25:06 UTC	1369	IN	Data Raw: 97 29 8e 23 43 51 b2 9f 88 4a 49 65 32 08 56 2c 41 1c 7d 48 6a 33 b3 4d 54 96 9e ff 22 d5 c9 6c 7f 6e 49 72 98 18 42 ea f3 36 3c a2 55 92 9a 2b 4c ac 40 e8 36 c6 2a 31 c5 a4 20 25 9a 79 c5 d2 b2 b2 cb 26 45 9a d9 56 50 41 52 c2 8e 40 ca 94 41 60 23 29 27 27 cc cc 20 85 9a e6 38 32 32 eb 70 95 42 69 9e 56 3e be b3 21 52 ab 0d 4c 56 36 d2 71 e9 01 a9 d6 0a 4e 20 17 de 47 22 f5 fa 4e a5 48 c5 31 48 c5 96 75 52 89 e0 a2 27 a9 59 66 0e 5f 95 34 a4 1f bd a2 a1 3f cd 2d 09 9b ac 91 70 dc cc c6 52 5b 87 5d 5d 5c de e9 ed f1 d0 20 9f 9b da 34 e8 c1 05 71 b1 3e 44 0a 7c 96 49 e8 8d 6a 69 51 2b d2 ee d1 87 6e ad af f4 f3 b2 6d 48 9f aa 11 66 9e 91 5e 2e 32 68 8d 52 f0 bc 84 da a6 c7 95 36 f6 fb ba b0 b8 d7 cb c3 b1 01 3f ea 86 f3 cb 33 76 a2 83 b8 34 55 02 18 1a 4e Data Ascii: )#CQJIe2V,A}Hj3MT"lnIrB6<U+L@6*1 %y&EVPAR@A`#)'' 822pBiV>!RLV6qN G"NH1HuR'Yf_4?-pR[]]\ 4q>D\|IjiQ+nmHf^.2hR6?3v4UN
2025-03-21 20:25:06 UTC	1369	IN	Data Raw: d0 45 12 bc 79 6f 8e 47 ba bf 39 d7 95 e5 ad 4e cc 9e 15 df c9 d9 93 58 b1 ba ba ba d5 a3 ed 99 de 1d 0e f4 e7 da 36 c4 77 95 9f d0 82 3b 31 7d 42 44 34 aa 6e ac af 25 b4 cf 9c 63 f2 50 cd 7c b5 50 d5 16 8e 88 84 fd b9 b6 d4 fa 87 36 83 1c 1c 7b 0b 9a 33 9f 54 6b f7 36 17 ce 5f 50 c1 33 26 cf ab 1e cc 6b 83 7d 66 d0 af 4d 1f 0a 14 bd 16 54 36 b9 29 24 ec 36 f5 7b 2c 37 f8 f7 ba 5a 03 c8 d9 3d dd 9f 72 a9 24 ce 4b 50 3c 15 fd a8 7a b0 3d 17 6c 97 19 d8 a3 e6 8c 40 71 b4 19 aa 0a c5 d5 a6 41 8f c5 5e 21 56 28 39 ff 88 2e 55 48 88 55 1c ec a4 41 3f 37 c4 23 bb e7 35 ec 5f 81 5d 66 2f 59 61 aa d7 96 a7 c9 60 f2 08 56 94 70 30 82 da f3 46 a1 e4 95 3d d8 9c 73 29 a2 76 0c 3b 06 fb da e0 8c a1 7f 4b 4e 13 4a 0e 2e b2 d0 14 b0 cb 74 67 7d 09 26 b2 95 49 73 98 96 Data Ascii: EyoG9NX6w;1}BD4n%cP\|P6{3Tk6_P3&k}fMT6)$6{,7Z=r$KP<z=l@qA^!V(9.UHUA?7#5_]f/Ya`Vp0F=s)v;KNJ.tg}&Is
2025-03-21 20:25:06 UTC	1369	IN	Data Raw: b5 cc 5c e7 e2 3c 8a 66 09 4a 0d cd 50 52 85 75 6e 49 58 1c 1e 69 30 67 87 08 93 68 f2 ce 23 da a6 1f 30 fd be b6 59 a7 ef 97 1d c2 62 b0 0d 0e 66 6e 01 d0 a1 c9 1b eb 98 a4 cd 69 2e 78 01 8d 2e 3f 2c 19 ac 13 24 2c 86 2d 80 63 e1 a8 30 83 7f af 59 b9 17 50 81 d4 a0 1c c7 3a d5 09 eb fb e1 60 10 09 c0 46 ac 64 ea ba 42 2f a0 07 02 65 54 b1 ad 72 39 a3 12 d6 fb c0 51 23 32 4c f0 11 47 e5 bc ac 0f 0d 09 1d d2 2a 15 93 a8 13 db f2 30 21 1c c5 01 70 4d d6 32 66 b0 af 0d ad ee 0c 39 8d 3e 2a 36 24 8b b4 48 70 79 c2 e2 d2 35 0d 67 fd 00 74 64 f2 ca 6a 26 61 d0 d8 9d 45 5d 5e de 82 84 fa 7f 6d b2 46 df 2f 3b 48 d8 bf 06 c8 ec 10 62 cc 6f ec df 59 d1 2c 6b 84 e4 3f 9f c8 0a 7e d3 17 57 4e 40 6e 01 80 2f 74 01 73 8f df e5 24 3a 0d 24 d4 d3 dd 09 2b 74 77 73 89 c4 Data Ascii: \<fJPRunIXi0gh#0Ybfni.x.?,$,-c0YP:`FdB/eTr9Q#2LG0!pM2f9>6$Hpy5gtdj&aE]^mF/;HboY,k?~WN@n/ts$:$+tws
2025-03-21 20:25:06 UTC	1369	IN	Data Raw: a6 ba 96 77 c6 b2 67 6f 70 01 ed 1d 85 6e f2 d1 fe 35 d8 b8 b2 ab ac ad 00 81 fd 9b 1a f0 2d 89 2c ae d5 84 ea 22 25 7f 28 c1 7d 64 c8 f4 b1 05 d6 e5 e5 2d 5c d5 35 2f 02 bc ce e4 a0 1d 5e 60 8b c5 54 ea 35 94 46 90 97 ae 41 3f 69 43 2a 60 21 97 4a a0 27 fe 4e d8 34 33 ab c5 75 11 68 fa f1 9f 23 e0 7f 4d 03 cf 64 65 a4 6f 56 04 fe 41 a1 d3 c5 0a 6b ed 58 5a 7f 2e e8 66 a7 c1 b7 91 34 11 d6 ed 60 c9 5c 15 74 af 05 9f 9e 9d ec dd 13 70 cc 44 27 47 40 c3 a2 ea da ea 06 96 52 1f 10 38 26 86 68 04 26 af 40 50 4f 81 a5 c2 2b 1f c1 5e a3 0f 06 f4 b4 e5 ee 37 80 63 d8 18 8d c2 2c 0c 22 c5 d4 f5 d5 0d 2c 9d 0b b6 94 65 e2 40 2f 43 4c af 87 a5 84 b0 2d 5d 23 31 39 47 8f 25 2e 7f 53 63 0c b4 14 27 c5 82 de 84 90 1e 08 49 35 11 e8 36 b9 a1 1a 8d de 1c 6e c8 db 27 81 Data Ascii: wgopn5-,"%(}d-\5/^`T5FA?iC*`!J'N43uh#MdeoVAkXZ.f4`\tpD'G@R8&h&@PO+^7c,",e@/CL-]#19G%.Sc'I56n'
2025-03-21 20:25:06 UTC	743	IN	Data Raw: 5b 95 86 68 d5 98 3e a5 5c dd 52 88 56 8f ef 53 a7 4c bd ad b7 56 91 0c e5 60 e6 82 3c ed 32 b7 56 93 57 c5 6c 6b 64 e9 1e 6c 79 98 50 2b 4b 8e 46 67 93 a2 03 27 d7 0a 73 7a 0c 02 09 3a 40 ee 28 99 17 52 9a 93 65 e6 96 f4 1c 21 b7 56 9c 27 7d 72 c9 b9 84 dc 5a 79 86 35 16 21 33 7f 1b a2 55 e8 f7 d7 2b 2f cf 1b a2 d5 e8 5d 57 20 2b b5 87 69 55 5a c5 07 c8 49 7c ad 50 73 73 69 a9 84 44 d4 a4 d5 ea bc d3 ca 46 b6 89 6b d5 ba 9e 7d ca 05 87 e7 39 b4 7a ad ec 7c 32 51 af 8d a4 89 56 b1 3e cf 2b 0f 99 d7 a3 15 6d 19 69 25 a1 81 7a b4 b2 b5 c9 d5 d8 a7 14 cc bc 18 ad 70 2b bb 69 09 28 76 b5 5a e9 fa fc 2d fa fc b2 68 d5 fb d8 69 51 17 d1 58 98 56 bf 4f 33 0a c4 25 de 9c 56 c2 c5 5c 36 da 18 04 a7 8a 92 79 21 45 ec c3 b0 25 48 4b e8 11 ac a8 56 c7 e3 cf 84 31 66 Data Ascii: [h>\RVSLV`<2VWlkdlyP+KFg'sz:@(Re!V'}rZy5!3U+/]W +iUZI\|PssiDFk}9z\|2QV>+mi%zp+i(vZ-hiQXVO3%V\6y!E%HKV1f

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:07 UTC	893	OUT	GET /petite-vue HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:07 UTC	396	IN	HTTP/1.1 302 Found Date: Fri, 21 Mar 2025 20:25:07 GMT Content-Type: text/plain;charset=UTF-8 Content-Length: 73 Connection: close Location: https://unpkg.com/petite-vue@0.4.1/dist/petite-vue.iife.js Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 92402d3f4f0272ad-EWR
2025-03-21 20:25:07 UTC	73	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 75 6e 70 6b 67 2e 63 6f 6d 2f 70 65 74 69 74 65 2d 76 75 65 40 30 2e 34 2e 31 2f 64 69 73 74 2f 70 65 74 69 74 65 2d 76 75 65 2e 69 69 66 65 2e 6a 73 Data Ascii: Redirecting to https://unpkg.com/petite-vue@0.4.1/dist/petite-vue.iife.js

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:07 UTC	713	OUT	GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1 Host: training.knowbe4.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://helpimg.s3.amazonaws.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:08 UTC	14555	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3168 Connection: close Date: Fri, 21 Mar 2025 20:25:08 GMT Last-Modified: Fri, 21 Mar 2025 14:54:33 GMT ETag: "a907e6e737788176b026fa71dfe8affe" x-amz-server-side-encryption: AES256 x-amz-version-id: HbCHkqMayvsN4Fk1QywCUY2MkLWav70o Accept-Ranges: bytes Server: AmazonS3 content-security-policy-report-only: default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io fonts.googleapis.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://.kmsat.kb4od.run https://.ckeditor.com/ https://.launchdarkly.com/ https://.zopim.com/ https://api-js.mixpanel.com/decide https://api-js.mixpanel.com/decide/ https://api-js.mixpanel.com/engage https://api-js.mixpanel.com/engage/ https://api-js.mixpanel.com/track https://api-js.mixpanel.com/track/ https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk. [TRUNCATED] referrer-policy: strict-origin-when-cross-origin strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-download-options: noopen x-frame-options: SAMEORIGIN x-permitted-cross-domain-policies: none x-xss-protection: 1; mode=block X-Cache: Miss from cloudfront Via: 1.1 c22d4946ef5faea12b8d3942ceb9259a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-P1 X-Amz-Cf-Id: 7_x_0uYrgJFEJhs_IR1joDSt6RAYoAcJVomTUPZ3JSfe1y2eXgkZxg==
2025-03-21 20:25:08 UTC	1829	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 0c 27 49 44 41 54 78 da ed 9d 5d 88 5c e5 19 80 65 09 21 88 48 90 10 42 2f 4a 08 22 22 22 52 8a 84 52 a4 88 14 e9 45 29 22 d2 0b 2f 8a 17 22 e2 85 48 10 11 33 73 e6 cc 99 99 9d cc fe 26 ec 4f c2 0e 9b dd 64 0d 51 4a 13 4c 8c 89 11 11 1b ac 50 ed 85 6d a5 55 bb 8d 75 b3 51 b3 99 24 9b ec ee fc ad 7d bf 35 17 a9 4d 9c dd ec ec bc df 7b f6 79 e0 21 41 e2 ce 9c ef 7c cf 7c df d9 d9 33 7b cb 2d 4d e6 db ed db bf 6d a6 cd 7e 7e 00 f0 03 10 30 80 61 08 18 c0 30 04 0c 60 18 02 06 30 0c 01 03 18 86 80 01 0c 43 c0 00 86 21 60 00 c3 10 30 80 61 08 18 c0 30 04 bc 3c fe 7a fc f8 ba 0b 03 03 77 cd 74 74 3c 58 ce 66 1f ab 66 b3 4f cd 66 b3 2f d6 a2 28 51 4b 26 73 e5 Data Ascii: PNGIHDR>U'IDATx]\e!HB/J"""RRE)"/"H3s&OdQJLPmUuQ$}5M{y!A\|\|3{-Mm~~0a0`0C!`0a0<zwtt<XffOf/(QK&s
2025-03-21 20:25:08 UTC	1339	IN	Data Raw: ae ae fb ff 7d f8 f0 ed cb 3d c6 53 c7 8e b5 4d 0d 0d 6d 99 6d 6f 7f a4 92 c9 6c 93 b0 c7 e4 b1 fe e1 1e 53 fb b8 57 bb 3a 55 2a 06 e2 fb f3 5b 42 b0 65 09 e9 bd 6a 3a 9d 99 dd b1 e3 57 67 f7 ee dd d0 ea 73 f3 f5 f0 f0 46 79 a1 78 54 9e c3 80 04 7d 5a 7b 32 af 46 5b 7d ce 97 8c ef 07 dc ca 93 25 91 8c 4b 2c bb 5c b0 67 f6 ef bf 55 fb dc 7c 9f e9 9e 9e 9f c8 ea 9f 73 db 6e ed 89 bd 5a d4 3e e7 0d f1 fd 80 5b 10 ed 27 6e 4b 3c dd db 7b 9f f6 b9 58 2c 7f 3c 71 a2 6d a6 a3 e3 21 79 b1 39 e0 76 0a da 93 3c ce 6a 9f eb 86 f8 7e c0 2b 71 52 ea 41 f0 55 35 8a 3a 65 45 bb 5f 7b fc 97 4b a9 af ef 47 f2 02 94 a9 27 93 25 ed c9 1e 47 b5 cf 6f 43 7c 3f e0 66 3d 2f 59 a9 ea 72 4d 7b 6c 36 9f ff cd f8 eb af af d1 1e f7 66 53 da b3 e7 f6 4a 26 f3 b2 84 3c a5 3d e9 e3 a4 Data Ascii: }=SMmmolSW:U*[Bej:WgsFyxT}Z{2F[}%K,\gU\|snZ>['nK<{X,<qm!y9v<j~+qRAU5:eE_{KG'%GoC\|?f=/YrM{l6fSJ&<=

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:08 UTC	923	OUT	GET /petite-vue@0.4.1/dist/petite-vue.iife.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:08 UTC	555	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:08 GMT Content-Type: text/javascript Content-Length: 16901 Connection: close CF-Ray: 92402d426f04432b-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 174257 Cache-Control: public, max-age=31536000 Last-Modified: Wed, 19 Mar 2025 20:00:51 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Content-Digest: sha256=:d0u46IsJk2JGpX8N/tiKN1JYqCNbiTVhyWiAQR2rxNU=: X-Content-Type-Options: nosniff Server: cloudflare
2025-03-21 20:25:08 UTC	814	IN	Data Raw: 76 61 72 20 70 6e 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 68 6e 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 70 6e 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 2c 43 3d 28 65 2c 74 2c 6e 29 3d 3e 28 68 6e 28 65 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 74 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 2c 50 65 74 69 74 65 56 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 69 66 28 61 28 65 29 29 7b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 Data Ascii: var pn=Object.defineProperty,hn=(e,t,n)=>t in e?pn(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n,C=(e,t,n)=>(hn(e,"symbol"!=typeof t?t+"":t,n),n),PetiteVue=function(e){"use strict";function t(e){if(a(e)){const n={};for(let s=0;s<e.length
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 21 28 21 6e 7c 7c 21 73 29 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 21 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 6c 65 74 20 6e 3d 21 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 6e 26 26 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 6f 28 65 5b 73 5d 2c 74 5b 73 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 28 65 2c 74 29 3b 69 66 28 6e 3d 67 28 65 29 2c 73 3d 67 28 74 29 2c 6e 7c 7c 73 29 7b 69 66 28 21 6e 7c 7c 21 73 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6c 65 6e 67 74 68 21 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 69 6e 20 65 29 7b 63 6f 6e 73 Data Ascii: )return!(!n\|\|!s)&&function(e,t){if(e.length!==t.length)return!1;let n=!0;for(let s=0;n&&s<e.length;s++)n=o(e[s],t[s]);return n}(e,t);if(n=g(e),s=g(t),n\|\|s){if(!n\|\|!s)return!1;if(Object.keys(e).length!==Object.keys(t).length)return!1;for(const n in e){cons
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 73 68 28 4d 3d 74 68 69 73 29 2c 46 2e 70 75 73 68 28 56 29 2c 56 3d 21 30 2c 4e 3d 31 3c 3c 2b 2b 52 2c 52 3c 3d 33 30 3f 28 28 7b 64 65 70 73 3a 65 7d 29 3d 3e 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 5b 74 5d 2e 77 7c 3d 4e 7d 29 28 74 68 69 73 29 3a 49 28 74 68 69 73 29 2c 74 68 69 73 2e 66 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 52 3c 3d 33 30 26 26 28 65 3d 3e 7b 63 6f 6e 73 74 7b 64 65 70 73 3a 74 7d 3d 65 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 6c 65 74 20 6e 3d 30 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 73 5d 3b 6a 28 72 29 26 26 21 41 28 72 29 3f 72 2e 64 65 6c 65 74 65 28 65 29 3a 74 5b 6e Data Ascii: sh(M=this),F.push(V),V=!0,N=1<<++R,R<=30?(({deps:e})=>{if(e.length)for(let t=0;t<e.length;t++)e[t].w\|=N})(this):I(this),this.fn()}finally{R<=30&&(e=>{const{deps:t}=e;if(t.length){let n=0;for(let s=0;s<t.length;s++){const r=t[s];j(r)&&!A(r)?r.delete(e):t[n
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 65 3a 5b 2e 2e 2e 65 5d 29 28 6e 21 3d 3d 4d 7c 7c 6e 2e 61 6c 6c 6f 77 52 65 63 75 72 73 65 29 26 26 28 6e 2e 73 63 68 65 64 75 6c 65 72 3f 6e 2e 73 63 68 65 64 75 6c 65 72 28 29 3a 6e 2e 72 75 6e 28 29 29 7d 63 6f 6e 73 74 20 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 73 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 3b 66 6f 72 28 6c 65 74 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 6e 5b 73 5b 72 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 65 3d 3e 21 21 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3a 65 3d 3e 21 21 6e 5b 65 5d 7d 28 22 5f 5f 70 72 6f 74 6f 5f 5f 2c 5f 5f 76 5f 69 73 52 65 66 2c 5f 5f 69 73 56 75 65 22 29 2c 44 3d 6e 65 77 20 53 Data Ascii: e:[...e])(n!==M\|\|n.allowRecurse)&&(n.scheduler?n.scheduler():n.run())}const q=function(e,t){const n=Object.create(null),s=e.split(",");for(let r=0;r<s.length;r++)n[s[r]]=!0;return t?e=>!!n[e.toLowerCase()]:e=>!!n[e]}("__proto__,__v_isRef,__isVue"),D=new S
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 65 2c 74 29 3d 3e 21 4f 62 6a 65 63 74 2e 69 73 28 65 2c 74 29 29 28 73 2c 69 29 26 26 4a 28 74 2c 22 73 65 74 22 2c 6e 2c 73 29 3a 4a 28 74 2c 22 61 64 64 22 2c 6e 2c 73 29 29 2c 63 7d 7d 28 29 2c 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 75 28 65 2c 74 29 3b 65 5b 74 5d 3b 63 6f 6e 73 74 20 73 3d 52 65 66 6c 65 63 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 73 26 26 6e 26 26 4a 28 65 2c 22 64 65 6c 65 74 65 22 2c 74 2c 76 6f 69 64 20 30 29 2c 73 7d 2c 68 61 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 52 65 66 6c 65 63 74 2e 68 61 73 28 65 2c 74 29 3b 72 65 74 75 72 6e 28 21 6d 28 74 29 7c 7c 21 44 2e 68 61 73 28 74 Data Ascii: e,t)=>!Object.is(e,t))(s,i)&&J(t,"set",n,s):J(t,"add",n,s)),c}}(),deleteProperty:function(e,t){const n=u(e,t);e[t];const s=Reflect.deleteProperty(e,t);return s&&n&&J(e,"delete",t,void 0),s},has:function(e,t){const n=Reflect.has(e,t);return(!m(t)\|\|!D.has(t
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 61 6d 65 6c 29 26 26 28 73 3d 77 28 73 29 29 2c 79 65 28 65 2c 73 2c 6e 2c 69 29 3b 65 6c 73 65 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 6e 29 79 65 28 65 2c 74 2c 6e 5b 74 5d 2c 69 26 26 69 5b 74 5d 29 3b 66 6f 72 28 63 6f 6e 73 74 20 74 20 69 6e 20 69 29 28 21 6e 7c 7c 21 28 74 20 69 6e 20 6e 29 29 26 26 79 65 28 65 2c 74 2c 6e 75 6c 6c 29 7d 69 3d 6e 7d 29 29 7d 2c 79 65 3d 28 65 2c 6e 2c 73 2c 72 29 3d 3e 7b 69 66 28 22 63 6c 61 73 73 22 3d 3d 3d 6e 29 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 69 28 65 2e 5f 63 6c 61 73 73 3f 5b 65 2e 5f 63 6c 61 73 73 2c 73 5d 3a 73 29 7c 7c 22 22 29 3b 65 6c 73 65 20 69 66 28 22 73 74 79 6c 65 22 3d 3d 3d 6e 29 7b 73 3d 74 28 73 29 3b Data Ascii: ll==r?void 0:r.camel)&&(s=w(s)),ye(e,s,n,i);else{for(const t in n)ye(e,t,n[t],i&&i[t]);for(const t in i)(!n\|\|!(t in n))&&ye(e,t,null)}i=n}))},ye=(e,n,s,r)=>{if("class"===n)e.setAttribute("class",i(e._class?[e._class,s]:s)\|\|"");else if("style"===n){s=t(s);
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 74 5b 6e 5d 29 29 7d 2c 53 65 3d 28 7b 65 6c 3a 65 2c 67 65 74 3a 74 2c 65 78 70 3a 6e 2c 61 72 67 3a 73 2c 6d 6f 64 69 66 69 65 72 73 3a 72 7d 29 3d 3e 7b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 6c 65 74 20 69 3d 24 65 2e 74 65 73 74 28 6e 29 3f 74 28 60 28 65 20 3d 3e 20 24 7b 6e 7d 28 65 29 29 60 29 3a 74 28 60 28 24 65 76 65 6e 74 20 3d 3e 20 7b 20 24 7b 6e 7d 20 7d 29 60 29 3b 69 66 28 22 76 75 65 3a 6d 6f 75 6e 74 65 64 22 21 3d 3d 73 29 7b 69 66 28 22 76 75 65 3a 75 6e 6d 6f 75 6e 74 65 64 22 3d 3d 3d 73 29 72 65 74 75 72 6e 28 29 3d 3e 69 28 29 3b 69 66 28 72 29 7b 22 63 6c 69 63 6b 22 3d 3d 3d 73 26 26 28 72 2e 72 69 67 68 74 26 26 28 73 3d 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 29 2c 72 2e 6d 69 64 64 6c 65 26 26 28 73 3d 22 6d 6f 75 73 65 75 70 Data Ascii: t[n]))},Se=({el:e,get:t,exp:n,arg:s,modifiers:r})=>{if(!s)return;let i=$e.test(n)?t(`(e => ${n}(e))`):t(`($event => { ${n} })`);if("vue:mounted"!==s){if("vue:unmounted"===s)return()=>i();if(r){"click"===s&&(r.right&&(s="contextmenu"),r.middle&&(s="mouseup
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 20 3d 20 76 61 6c 20 7d 60 29 2c 7b 74 72 69 6d 3a 66 2c 6e 75 6d 62 65 72 3a 75 3d 22 6e 75 6d 62 65 72 22 3d 3d 3d 69 7d 3d 72 7c 7c 7b 7d 3b 69 66 28 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 29 7b 63 6f 6e 73 74 20 74 3d 65 3b 77 65 28 65 2c 22 63 68 61 6e 67 65 22 2c 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 74 2e 6f 70 74 69 6f 6e 73 2c 28 65 3d 3e 65 2e 73 65 6c 65 63 74 65 64 29 29 2e 6d 61 70 28 28 65 3d 3e 75 3f 4f 28 6a 65 28 65 29 29 3a 6a 65 28 65 29 29 29 3b 6c 28 74 2e 6d 75 6c 74 69 70 6c 65 3f 65 3a 65 5b 30 5d 29 7d 29 29 2c 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6e 28 29 2c 73 3d 74 2e 6d 75 6c 74 69 70 6c 65 3b 66 6f 72 28 6c Data Ascii: = val }`),{trim:f,number:u="number"===i}=r\|\|{};if("SELECT"===e.tagName){const t=e;we(e,"change",(()=>{const e=Array.prototype.filter.call(t.options,(e=>e.selected)).map((e=>u?O(je(e)):je(e)));l(t.multiple?e:e[0])})),s((()=>{const e=n(),s=t.multiple;for(l
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 28 3f 3a 2c 28 5b 5e 2c 5c 7d 5c 5d 5d 2a 29 29 3f 24 2f 2c 56 65 3d 2f 5e 5c 28 7c 5c 29 24 2f 67 2c 46 65 3d 2f 5e 5b 7b 5b 5d 5c 73 2a 28 28 3f 3a 5b 5c 77 5f 24 5d 2b 5c 73 2a 2c 3f 5c 73 2a 29 2b 29 5b 5c 5d 7d 5d 24 2f 2c 7a 65 3d 28 65 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6d 61 74 63 68 28 49 65 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 69 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2c 6f 3d 6e 65 77 20 54 65 78 74 28 22 22 29 3b 69 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 65 29 2c 69 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 63 6f 6e 73 74 20 63 3d 73 5b 32 5d 2e 74 72 69 6d 28 29 3b 6c 65 74 20 6c 2c 66 2c 75 2c 70 2c 68 3d 73 5b 31 5d 2e 74 72 Data Ascii: (?:,([^,\}\]]))?$/,Ve=/^\(\|\)$/g,Fe=/^[{[]\s((?:[\w_$]+\s,?\s)+)[\]}]$/,ze=(e,t,n)=>{const s=t.match(Ie);if(!s)return;const r=e.nextSibling,i=e.parentElement,o=new Text("");i.insertBefore(o,e),i.removeChild(e);const c=s[2].trim();let l,f,u,p,h=s[1].tr
2025-03-21 20:25:08 UTC	1369	IN	Data Raw: 74 28 69 2c 6e 3f 6e 2e 65 6c 3a 6f 29 29 29 2c 65 2e 75 6e 73 68 69 66 74 28 6e 3d 66 29 7d 79 3d 65 7d 65 6c 73 65 20 79 3d 62 2e 6d 61 70 28 28 65 3d 3e 24 28 65 2c 6f 29 29 29 2c 5f 3d 21 30 7d 29 29 2c 72 7d 2c 48 65 3d 28 7b 65 6c 3a 65 2c 63 74 78 3a 7b 73 63 6f 70 65 3a 7b 24 72 65 66 73 3a 74 7d 7d 2c 67 65 74 3a 6e 2c 65 66 66 65 63 74 3a 73 7d 29 3d 3e 7b 6c 65 74 20 72 3b 72 65 74 75 72 6e 20 73 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 6e 28 29 3b 74 5b 73 5d 3d 65 2c 72 26 26 73 21 3d 3d 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 2c 72 3d 73 7d 29 29 2c 28 29 3d 3e 7b 72 26 26 64 65 6c 65 74 65 20 74 5b 72 5d 7d 7d 2c 4a 65 3d 2f 5e 28 3f 3a 76 2d 7c 3a 7c 40 29 2f 2c 5a 65 3d 2f 5c 2e 28 5b 5c 77 2d 5d 2b 29 2f 67 3b 6c 65 74 20 71 65 3d Data Ascii: t(i,n?n.el:o))),e.unshift(n=f)}y=e}else y=b.map((e=>$(e,o))),_=!0})),r},He=({el:e,ctx:{scope:{$refs:t}},get:n,effect:s})=>{let r;return s((()=>{const s=n();t[s]=e,r&&s!==r&&delete t[r],r=s})),()=>{r&&delete t[r]}},Je=/^(?:v-\|:\|@)/,Ze=/\.([\w-]+)/g;let qe=

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:08 UTC	756	OUT	GET /assets/sei-flag-90af55d793544fe1893f26677661a4252761afbe811fab0eced85c67bc82f984.png HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/assets/sei-styles-1837e0b6e1baaf1af90438028a176241b70a365a8a09ff4bf668cf3bf9e3c759.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:09 UTC	241	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:09 GMT Content-Type: image/png Content-Length: 3168 Connection: close Last-Modified: Fri, 21 Mar 2025 14:08:51 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2025-03-21 20:25:09 UTC	3168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 f0 08 06 00 00 00 3e 55 e9 92 00 00 0c 27 49 44 41 54 78 da ed 9d 5d 88 5c e5 19 80 65 09 21 88 48 90 10 42 2f 4a 08 22 22 22 52 8a 84 52 a4 88 14 e9 45 29 22 d2 0b 2f 8a 17 22 e2 85 48 10 11 33 73 e6 cc 99 99 9d cc fe 26 ec 4f c2 0e 9b dd 64 0d 51 4a 13 4c 8c 89 11 11 1b ac 50 ed 85 6d a5 55 bb 8d 75 b3 51 b3 99 24 9b ec ee fc ad 7d bf 35 17 a9 4d 9c dd ec ec bc df 7b f6 79 e0 21 41 e2 ce 9c ef 7c cf 7c df d9 d9 33 7b cb 2d 4d e6 db ed db bf 6d a6 cd 7e 7e 00 f0 03 10 30 80 61 08 18 c0 30 04 0c 60 18 02 06 30 0c 01 03 18 86 80 01 0c 43 c0 00 86 21 60 00 c3 10 30 80 61 08 18 c0 30 04 bc 3c fe 7a fc f8 ba 0b 03 03 77 cd 74 74 3c 58 ce 66 1f ab 66 b3 4f cd 66 b3 2f d6 a2 28 51 4b 26 73 e5 Data Ascii: PNGIHDR>U'IDATx]\e!HB/J"""RRE)"/"H3s&OdQJLPmUuQ$}5M{y!A\|\|3{-Mm~~0a0`0C!`0a0<zwtt<XffOf/(QK&s

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:10 UTC	575	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCMDYzgEI0uDOAQiv5M4BCOLkzgEIi+XOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:10 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:10 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-R7TEmnZn5WJ8lpnpoSi9jQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-21 20:25:10 UTC	887	IN	Data Raw: 33 37 30 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 62 6f 73 74 6f 6e 20 63 65 6c 74 69 63 73 20 62 69 6c 6c 20 63 68 69 73 68 6f 6c 6d 22 2c 22 6d 63 64 6f 6e 61 6c 64 73 20 6d 69 6e 65 63 72 61 66 74 20 6d 6f 76 69 65 20 68 61 70 70 79 20 6d 65 61 6c 22 2c 22 61 70 70 6c 65 20 69 70 68 6f 6e 65 20 31 37 20 70 72 6f 20 6d 61 78 22 2c 22 68 65 61 72 74 6c 61 6e 64 20 73 65 61 73 6f 6e 20 31 38 22 2c 22 73 6f 75 74 68 77 65 73 74 20 61 69 72 6c 69 6e 65 73 20 74 61 78 69 77 61 79 22 2c 22 6e 63 61 61 20 77 72 65 73 74 6c 69 6e 67 20 63 68 61 6d 70 69 6f 6e 73 68 69 70 73 20 32 30 32 35 22 2c 22 61 72 69 65 73 20 64 61 69 6c 79 20 68 6f 72 6f 73 63 6f 70 65 73 22 2c 22 6e 69 6e 74 65 6e 64 6f 20 73 77 69 74 63 68 20 6f 6e 6c 69 6e 65 22 5d 2c 5b 22 22 2c 22 22 Data Ascii: 370)]}'["",["boston celtics bill chisholm","mcdonalds minecraft movie happy meal","apple iphone 17 pro max","heartland season 18","southwest airlines taxiway","ncaa wrestling championships 2025","aries daily horoscopes","nintendo switch online"],["",""
2025-03-21 20:25:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:10 UTC	929	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/6be6d52b0090/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:10 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:10 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Fri, 21 Mar 2025 14:09:58 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Timestamp	Bytes transferred	Direction	Data
2025-03-21 20:25:10 UTC	392	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 20:25:11 UTC	253	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 20:25:11 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Fri, 21 Mar 2025 14:09:58 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Target ID:	1
Start time:	16:24:51
Start date:	21/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff632b40000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	16:24:55
Start date:	21/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,4257531998769737014,4011222522614677871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2016 /prefetch:3
Imagebase:	0x7ff632b40000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	16:24:58
Start date:	21/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1988,i,4257531998769737014,4011222522614677871,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3188 /prefetch:8
Imagebase:	0x7ff632b40000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	6
Start time:	16:25:01
Start date:	21/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.donotreply.biz/XN3RjNU5zeEJtSzZ1MTFaMS94THR1OThVQldYUHpOM2ZPZ0x0Qy9KTlgxK20yZlRqUUlVQWluR2dYY2RXaWxvdWl1NXZCb2tXczh5cU5sMnZMOWVUNmJRd1A5dllUczVrV1RESHVTRTdGZHk1VzRTSW1IZUh1RVRyWm1LSUxnaXhvbVo0SklITWhRMkg2ZFBNcHhTQlNYNGpySVJ5OE5XSVlUdForRTJOTm9UaDg2bGdvSGtTTy93U0pnPT0tLW5RWGpkVDJ2WDEvcHpQWGMtLTdZZW13Y2Z1YnUxTGV4ZVVUNVFxUEE9PQ==?cid=2443169866"
Imagebase:	0x7ff632b40000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre