Play interactive tourEdit tour

Windows Analysis Report
http://email.mg.versatilev.com/c/eJwczMFtxSAMANBp4BgZ28Rw4NBL9gDH9CPlt1GCoo5ftQO8txdtHLp4K0EYOWVI4l-l7mnFGljyHiCAUYtkGKW2Hlfp7EdBwAiEEFZmlkWppZyjMWmutIpjeH8uj113neOwZ9Hvtz_Ka87zdvThcHO4hZpISBmtZU3aCSzFnZc5jmZf-vOHHG7-Kuc11E7HcNeh_9dT8DcAAP__O8c2mA

Overview

General Information

Sample URL:	http://email.mg.versatilev.com/c/eJwczMFtxSAMANBp4BgZ28Rw4NBL9gDH9CPlt1GCoo5ftQO8txdtHLp4K0EYOWVI4l-l7mnFGljyHiCAUYtkGKW2Hlfp7EdBwAiEEFZmlkWppZyjMWmutIpjeH8uj113neOwZ9Hvtz_Ka87zdvThcHO4hZpISBmtZU3aCSz
Analysis ID:	1646922
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected BlockedWebSite

Yara detected Powershell download and execute

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Suricata IDS alerts with low severity for network traffic

Classification

×

Joe Sandbox Signatures

• • AV Detection
• • Phishing
• • Compliance
• • Networking
• • System Summary
• • HIPS / PFW / Operating System Protection Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/cdn-cgi/styles/cf.errors.css

Avira URL Cloud: Label: phishing

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_223, type: DROPPED

HTML page contains hidden javascript code

Source: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/

HTTP Parser: Base64 decoded: 1742816375.000000

Found iframes

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=897087927.1742816406&gtm=45je53j1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=label_only_3&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109&z=725750187
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=897087927.1742816406&gtm=45je53j1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=label_only_3&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109&z=725750187
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=1900650329.1742816404;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=897087927.1742816406&gtm=45je53j1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=label_only_3&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109&z=725750187
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=1900650329.1742816404;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=897087927.1742816406&gtm=45je53j1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=label_only_3&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109&z=725750187
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=1900650329.1742816404;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=2674229362611;npa=0;auiddc=1900650329.1742816404;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1957614229;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=6693326100027;npa=0;auiddc=1900650329.1742816404;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1662889056;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109;epver=2?

HTML page is missing a favicon

Source: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/	HTTP Parser: No favicon
Source: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/	HTTP Parser: No favicon
Source: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/?cf_captcha=verified	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon

META author tag missing

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found

META copyright tag missing

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.8:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.102.239.211:443 -> 192.168.2.8:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.8:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.8:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.8:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.8:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.8:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.30.78:443 -> 192.168.2.8:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.8:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.57.57:443 -> 192.168.2.8:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.216.21.105:443 -> 192.168.2.8:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.8:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.39:443 -> 192.168.2.8:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.140:443 -> 192.168.2.8:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.71.178.49:443 -> 192.168.2.8:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.200.0.17:443 -> 192.168.2.8:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.108:443 -> 192.168.2.8:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.44.157:443 -> 192.168.2.8:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.72.105:443 -> 192.168.2.8:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.17.5:443 -> 192.168.2.8:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.91:443 -> 192.168.2.8:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.212.111:443 -> 192.168.2.8:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.8:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.206.243.141:443 -> 192.168.2.8:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.161.142:443 -> 192.168.2.8:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.218.25.109:443 -> 192.168.2.8:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.31.155:443 -> 192.168.2.8:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.147.11.29:443 -> 192.168.2.8:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.56:443 -> 192.168.2.8:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.71.22:443 -> 192.168.2.8:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.8:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.154.8:443 -> 192.168.2.8:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.8:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.16.5:443 -> 192.168.2.8:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.17.5:443 -> 192.168.2.8:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.8:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.8:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.68:443 -> 192.168.2.8:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.28.144.124:443 -> 192.168.2.8:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.66:443 -> 192.168.2.8:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.8:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.10:443 -> 192.168.2.8:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.189:443 -> 192.168.2.8:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.230:443 -> 192.168.2.8:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.230:443 -> 192.168.2.8:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.146.5:443 -> 192.168.2.8:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.211.206.91:443 -> 192.168.2.8:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.8:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.161.194.228:443 -> 192.168.2.8:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.8:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.102:443 -> 192.168.2.8:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.226:443 -> 192.168.2.8:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.200.0.17:443 -> 192.168.2.8:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.161.142:443 -> 192.168.2.8:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.218.25.109:443 -> 192.168.2.8:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.91:443 -> 192.168.2.8:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.10:443 -> 192.168.2.8:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.8:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.8:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.212.111:443 -> 192.168.2.8:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.8:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.8:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.109:443 -> 192.168.2.8:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.132:443 -> 192.168.2.8:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.132:443 -> 192.168.2.8:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.132:443 -> 192.168.2.8:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.10:443 -> 192.168.2.8:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.70:443 -> 192.168.2.8:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.146.5:443 -> 192.168.2.8:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.8:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.19.28.59:443 -> 192.168.2.8:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.8:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.10:443 -> 192.168.2.8:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.8:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.70:443 -> 192.168.2.8:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.166:443 -> 192.168.2.8:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.8:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.8:49980 version: TLS 1.2

Networking

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: email.mg.versatilev.com to https://1a8373c42eb9c8cf30e85d4.tilbencx.com/

Suricata IDS alerts with low severity for network traffic

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49819 -> 172.66.0.227:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49827 -> 172.66.0.227:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.8:49876 -> 104.18.26.193:443

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.40
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.201.147
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.201.147
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.201.147
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.131
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.131
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.131
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.131
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.165.131
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.90

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /c/eJwczMFtxSAMANBp4BgZ28Rw4NBL9gDH9CPlt1GCoo5ftQO8txdtHLp4K0EYOWVI4l-l7mnFGljyHiCAUYtkGKW2Hlfp7EdBwAiEEFZmlkWppZyjMWmutIpjeH8uj113neOwZ9Hvtz_Ka87zdvThcHO4hZpISBmtZU3aCSzFnZc5jmZf-vOHHG7-Kuc11E7HcNeh_9dT8DcAAP__O8c2mA HTTP/1.1Host: email.mg.versatilev.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEI59DNAQi91c4BCIDWzgEIvODOAQiu5M4BCIvlzgEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/5mrrg/0x4AAAAAABB0Uao46c8zbYQ1/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.6380491553398095:1742811896:zZf_ge7-v4kIAdLxOvNtQAuTVhSytmtR3zG55R36tnk/9255e38a186e4f0b HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9255e3951ba64a1a&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/5mrrg/0x4AAAAAABB0Uao46c8zbYQ1/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/5mrrg/0x4AAAAAABB0Uao46c8zbYQ1/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=CSCzkZgKhrhu9IE60CXsC8aIutsyfPCBoY6zxE2ETug-1742816376-1.2.1.1-5fw2nsF_XtKA0Fp8P8Cy.9AWnFb2qksdZXLudElQUDwUv8WsdMm.FR.RSvSXvtOR.GBcyWp4CF9gA1rSPQ9HWmqs4Sl_Nz9e0sq6Dt_GaEOM94eYAwL7mb_xlqRy7bANnWCWZx_nT3vhwVmFOoOPtxW.vo0TN0jgkiOrMEKFHjM8ZXYooDBMBFPzS2QnB6tBATsjgZedi7PiTGhq2sBkPM06e_trXU7TMNTRkpW3Zo6KBL7Tv0qjWfeEV17cXwJkLlwobjhyvZEM33DgKquzXNwAdM7MoJty8tnKM21vS0xKW1ruUye6ItPVBwcg9E32Fei_crssQotMfm.MSg14uIJj2wLgISPsJOa6eyY0oqg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/796773459:1742815547:kpwTOdmI52ZAk6drNTZEW2hGg-E6E4TuXNowloX_s1o/9255e3951ba64a1a/vHgIwl5brPfSLuABbgGgEW8ToUXRl8hzjwGGROk_1FY-1742816377-1.1.1.1-BZdkMgS8Y4JXeux3zHf_FIHi_er88QycBgEkyNV.l47fiFAJf77ME.AEKLgYRFeQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9255e3951ba64a1a/1742816378443/e2e6662d5c9aa1935f6d74cc6e99e3f3ba3cac6929b1b62f2ea808ef3e8d7149/eZON7URgeRfl46E HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/5mrrg/0x4AAAAAABB0Uao46c8zbYQ1/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9255e3951ba64a1a/1742816378446/SRB-isnffzqNEUW HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/5mrrg/0x4AAAAAABB0Uao46c8zbYQ1/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9255e3951ba64a1a/1742816378446/SRB-isnffzqNEUW HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/796773459:1742815547:kpwTOdmI52ZAk6drNTZEW2hGg-E6E4TuXNowloX_s1o/9255e3951ba64a1a/vHgIwl5brPfSLuABbgGgEW8ToUXRl8hzjwGGROk_1FY-1742816377-1.1.1.1-BZdkMgS8Y4JXeux3zHf_FIHi_er88QycBgEkyNV.l47fiFAJf77ME.AEKLgYRFeQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?cf_captcha=verified HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=CSCzkZgKhrhu9IE60CXsC8aIutsyfPCBoY6zxE2ETug-1742816376-1.2.1.1-5fw2nsF_XtKA0Fp8P8Cy.9AWnFb2qksdZXLudElQUDwUv8WsdMm.FR.RSvSXvtOR.GBcyWp4CF9gA1rSPQ9HWmqs4Sl_Nz9e0sq6Dt_GaEOM94eYAwL7mb_xlqRy7bANnWCWZx_nT3vhwVmFOoOPtxW.vo0TN0jgkiOrMEKFHjM8ZXYooDBMBFPzS2QnB6tBATsjgZedi7PiTGhq2sBkPM06e_trXU7TMNTRkpW3Zo6KBL7Tv0qjWfeEV17cXwJkLlwobjhyvZEM33DgKquzXNwAdM7MoJty8tnKM21vS0xKW1ruUye6ItPVBwcg9E32Fei_crssQotMfm.MSg14uIJj2wLgISPsJOa6eyY0oqg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/796773459:1742815547:kpwTOdmI52ZAk6drNTZEW2hGg-E6E4TuXNowloX_s1o/9255e3951ba64a1a/vHgIwl5brPfSLuABbgGgEW8ToUXRl8hzjwGGROk_1FY-1742816377-1.1.1.1-BZdkMgS8Y4JXeux3zHf_FIHi_er88QycBgEkyNV.l47fiFAJf77ME.AEKLgYRFeQ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/?cf_captcha=verifiedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=CSCzkZgKhrhu9IE60CXsC8aIutsyfPCBoY6zxE2ETug-1742816376-1.2.1.1-5fw2nsF_XtKA0Fp8P8Cy.9AWnFb2qksdZXLudElQUDwUv8WsdMm.FR.RSvSXvtOR.GBcyWp4CF9gA1rSPQ9HWmqs4Sl_Nz9e0sq6Dt_GaEOM94eYAwL7mb_xlqRy7bANnWCWZx_nT3vhwVmFOoOPtxW.vo0TN0jgkiOrMEKFHjM8ZXYooDBMBFPzS2QnB6tBATsjgZedi7PiTGhq2sBkPM06e_trXU7TMNTRkpW3Zo6KBL7Tv0qjWfeEV17cXwJkLlwobjhyvZEM33DgKquzXNwAdM7MoJty8tnKM21vS0xKW1ruUye6ItPVBwcg9E32Fei_crssQotMfm.MSg14uIJj2wLgISPsJOa6eyY0oqg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=CSCzkZgKhrhu9IE60CXsC8aIutsyfPCBoY6zxE2ETug-1742816376-1.2.1.1-5fw2nsF_XtKA0Fp8P8Cy.9AWnFb2qksdZXLudElQUDwUv8WsdMm.FR.RSvSXvtOR.GBcyWp4CF9gA1rSPQ9HWmqs4Sl_Nz9e0sq6Dt_GaEOM94eYAwL7mb_xlqRy7bANnWCWZx_nT3vhwVmFOoOPtxW.vo0TN0jgkiOrMEKFHjM8ZXYooDBMBFPzS2QnB6tBATsjgZedi7PiTGhq2sBkPM06e_trXU7TMNTRkpW3Zo6KBL7Tv0qjWfeEV17cXwJkLlwobjhyvZEM33DgKquzXNwAdM7MoJty8tnKM21vS0xKW1ruUye6ItPVBwcg9E32Fei_crssQotMfm.MSg14uIJj2wLgISPsJOa6eyY0oqg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/?cf_captcha=verifiedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=CSCzkZgKhrhu9IE60CXsC8aIutsyfPCBoY6zxE2ETug-1742816376-1.2.1.1-5fw2nsF_XtKA0Fp8P8Cy.9AWnFb2qksdZXLudElQUDwUv8WsdMm.FR.RSvSXvtOR.GBcyWp4CF9gA1rSPQ9HWmqs4Sl_Nz9e0sq6Dt_GaEOM94eYAwL7mb_xlqRy7bANnWCWZx_nT3vhwVmFOoOPtxW.vo0TN0jgkiOrMEKFHjM8ZXYooDBMBFPzS2QnB6tBATsjgZedi7PiTGhq2sBkPM06e_trXU7TMNTRkpW3Zo6KBL7Tv0qjWfeEV17cXwJkLlwobjhyvZEM33DgKquzXNwAdM7MoJty8tnKM21vS0xKW1ruUye6ItPVBwcg9E32Fei_crssQotMfm.MSg14uIJj2wLgISPsJOa6eyY0oqg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /learning/access-management/phishing-attack/ HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://1a8373c42eb9c8cf30e85d4.tilbencx.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /img/privacyoptions.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /webpack-runtime-2b819ec111a737f80dd2.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /framework-957a522640f43541ca6a.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /app-d64c099fb8fcdf76ac5e.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /img/privacyoptions.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.js HTTP/1.1Host: performance.radar.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /logger-1.min.js HTTP/1.1Host: cdn.logr-ingest.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1048862057.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3199558980.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/333361657.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3934964512.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /a06cff934e9579536ce1c10bad21c1d6d7f63ae0-90484db4602d401d94ca.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-bdf509b905b7d415f8b7.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /174-242772ef10d8d161ae24.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak8t2/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/i.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f597f8065f97/065ba81630d7/launch-efab6d095ce0.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/2459 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A02+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A02+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/333361657.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A02+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3199558980.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A02+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3934964512.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A02+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A02+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1048862057.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A02+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /static/z/s.js?z=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 HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A02+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=9255e43d2cd61899&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak8t2/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak8t2/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1742816403908 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sl.js HTTP/1.1Host: scout-cdn.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /li.lms-analytics/insight.min.js HTTP/1.1Host: snap.licdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bizible.js HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /munchkin-beta.js HTTP/1.1Host: munchkin.marketo.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742816404568&uuid=b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1be41a80498a5b73.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=37pXYrro6wCZbsU7 HTTP/1.1Host: js.qualified.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816404568&pid=28851&conversionId=13043044 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /164/munchkin.js HTTP/1.1Host: munchkin.marketo.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&_biz_h=-1777624096&_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742816404792&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=625159&cdn_o=a&_biz_z=1742816404793 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=0d3296c0-72e4-43ee-a2c3-e367ecec6ce7&_u=KGDAAEADQAAAAC%7E&z=1681343899&slf_rd=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /710030.gif?pdata=d=desktop,lc=US,ref=1a8373c42eb9c8cf30e85d4.tilbencx.com HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: cloudflareinc.demdex.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=81238157711014799232162088242494639092
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816404568&pid=28851&conversionId=13043044&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=27f2d242-8c2f-4467-bc28-450a1816b0ec; bcookie="v=2&96c81e8f-90a8-4d95-8766-141ac6b4a805"; lidc="b=VGST04:s=V:r=V:a=V:p=V:g=3487:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQHzb50NLv9f6fGJL_EzHFL4ydaU21IV"
Source: global traffic	HTTP traffic detected: GET /attribution_trigger?pid=28851&time=1742816404785&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: *sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://www.cloudflare.comAttribution-Reporting-Eligible: trigger, not-event-source, not-navigation-sourceAttribution-Reporting-Support: web=osSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816405416&pid=28851&conversionId=10249833 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=27f2d242-8c2f-4467-bc28-450a1816b0ec; bcookie="v=2&96c81e8f-90a8-4d95-8766-141ac6b4a805"; lidc="b=VGST04:s=V:r=V:a=V:p=V:g=3487:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQHzb50NLv9f6fGJL_EzHFL4ydaU21IV"
Source: global traffic	HTTP traffic detected: GET /u?_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742816404796&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=520206&cdn_o=a&_biz_z=1742816404796 HTTP/1.1Host: cdn.bizibly.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDkyNjh9.dguW7jthV1Y1wgRcAJfVrR_xsANK7zX9ZiD1wf0suvY HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=28851&time=1742816404785&li_adsId=65567f06-3ec6-4694-b40a-cca11c104ab4&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm/dd?d_uuid=81238157711014799232162088242494639092 HTTP/1.1Host: cm.everesttech.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=e8b473bd-fbe9-4459-95fe-f8a6c253e1fe&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41860ec0-da47-4c28-9d0d-08646c5da723&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20172%7CMCMID%7C88976361176656194011568959402515125710%7CMCAAMLH-1743421204%7C7%7CMCAAMB-1743421204%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1742823604s%7CNONE%7CvVersion%7C5.5.0; _biz_uid=bb36af23766843629aedf7ebe52a09dd; _biz_nA=2; _biz_pendingA=%5B%22ipv%3F_biz_r%3Dhttps%253A%252F%252F1a8373c42eb9c8cf30e85d4.tilbencx.com%252F%26_biz_h%3D-1777624096%26_biz_u%3Dbb36af23766843629aedf7ebe52a09dd%26_biz_l%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26_biz_t%3D1742816404792%26_biz_i%3DWhat%2520is%2520a%2520phishing%2520attack%253F%2520%257C%2520Cloudflare%26_biz_n%3D0%26rnd%3D625159%22%2C%22u%3FmapType%3Decid%26mapValue%3D8AD56F28618A50850A495FB6%2540AdobeOrg_88976361176656194011568959402515125710%26_biz_u%3Dbb36af23766843629aedf7ebe52a09dd%26_biz_l%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26_biz_t%3D1742816404797%26_biz_i%3DWhat%2520is%2520a%2520phishing%2520attack%253F%2520%257C%2520Cloudflare%26_biz_n%3D1%26rnd%3D273774%22%5D; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%22-1323920579%22%7D; cfzs_amplitude=%7B%22TTin_session_id%2
Source: global traffic	HTTP traffic detected: GET /xdc.js?_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_h=-1777624096&cdn_o=a&jsVer=4.25.02.19 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=bb36af23766843629aedf7ebe52a09dd
Source: global traffic	HTTP traffic detected: GET /api/segment?pdata=d%3Ddesktop%2Clc%3DUS%2Cref%3D1a8373c42eb9c8cf30e85d4.tilbencx.com&pid=710030&redirect=1 HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: rlas3=U9Uxd9e8M398yXhfm3XY6bMmKME9wIjs8XVluvUWkiI=
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/2459 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20172%7CMCMID%7C88976361176656194011568959402515125710%7CMCAAMLH-1743421204%7C7%7CMCAAMB-1743421204%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1742823604s%7CNONE%7CvVersion%7C5.5.0; _biz_uid=bb36af23766843629aedf7ebe52a09dd; _biz_nA=2; _biz_pendingA=%5B%22ipv%3F_biz_r%3Dhttps%253A%252F%252F1a8373c42eb9c8cf30e85d4.tilbencx.com%252F%26_biz_h%3D-1777624096%26_biz_u%3Dbb36af23766843629aedf7ebe52a09dd%26_biz_l%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26_biz_t%3D1742816404792%26_biz_i%3DWhat%2520is%2520a%2520phishing%2520attack%253F%2520%257C%2520Cloudflare%26_biz_n%3D0%26rnd%3D625159%22%2C%22u%3FmapType%3Decid%26mapValue%3D8AD56F28618A50850A495FB6%2540AdobeOrg_88976361176656194011568959402515125710%26_biz_u%3Dbb36af23766843629aedf7ebe52a09dd%26_biz_l%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26_biz_t%3D1742816404797%26_biz_i%3DWhat%2520is%2520a%2520phishing%2520attack%253F%2520%257C%2520Cloudflare%26_biz_n%3D1%26rnd%3D273774%22%5D; _biz_flagsA=%7B%22Version%22%3A1%2C%22Ecid%22%3A%22-1323920579%22%7D; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_g
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z_FElQAAALYfugN2 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=81238157711014799232162088242494639092
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=e8b473bd-fbe9-4459-95fe-f8a6c253e1fe&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41860ec0-da47-4c28-9d0d-08646c5da723&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=ed448154-51e8-406a-ae4b-f74a243806ec&wu=670b1888-476f-4bae-bc8a-69f0d5060177&ca=2025-03-24T11%3A40%3A05.241Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&pv=1&fv=2025-03-24-401f879c99&iml=false&bl=en-US&ic=true HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: JnhuxA7EzPX5FJLNUyCaSA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC55904e5e1abc4d38a5f1ac3dea0edaab-source.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%2F%3Ffmt%3Djs%26v%3D2%26url%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26time%3D1742816404568%26pid%3D28851%26conversionId%3D13043044%26cookiesTest%3Dtrue%26liSync%3Dtrue HTTP/1.1Host: www.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=27f2d242-8c2f-4467-bc28-450a1816b0ec; bcookie="v=2&96c81e8f-90a8-4d95-8766-141ac6b4a805"; lidc="b=VGST04:s=V:r=V:a=V:p=V:g=3487:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQHzb50NLv9f6fGJL_EzHFL4ydaU21IV"; UserMatchHistory=AQIHq4gPMgGlKgAAAZXH8-mNr5toW8H2fLjJRl_fhcnDP2ahRmo3zx65DvSqIWMhDmmjQkIUTc_A5A; AnalyticsSyncHistory=AQJLsm-oP2tsDwAAAZXH8-mNG5n1y8yDr9Jt-Sg06WrhV9fHIWCgK0CJdFjAi6LYPIe5OEdQo3aKxpftTl9j9g
Source: global traffic	HTTP traffic detected: GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%2F%3Ffmt%3Djs%26v%3D2%26url%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26time%3D1742816405416%26pid%3D28851%26conversionId%3D10249833%26liSync%3Dtrue HTTP/1.1Host: www.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=27f2d242-8c2f-4467-bc28-450a1816b0ec; bcookie="v=2&96c81e8f-90a8-4d95-8766-141ac6b4a805"; lidc="b=VGST04:s=V:r=V:a=V:p=V:g=3487:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQHzb50NLv9f6fGJL_EzHFL4ydaU21IV"; UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=28851&time=1742816404785&li_adsId=65567f06-3ec6-4694-b40a-cca11c104ab4&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=ISS7hkB5e3M8xK5Aqzz6xXbrH8O2Uo9oH6JSat5cnSzcpYX3CtK_6w==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_88976361176656194011568959402515125710&_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742816404797&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=1&rnd=273774&cdn_o=a&_biz_z=1742816405351 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=bb36af23766843629aedf7ebe52a09dd
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CI6tHBoNCJaJhb8GEgUI6AcQAEIASgA HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: rlas3=rihcIJZBQg/f3wmkLkkwXoaFwyQNuG5ovKXPHBpak3k=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-SQCRB0TXZW&gacid=897087927.1742816406&gtm=45je53j1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=label_only_3&aip=1&fledge=1&frm=0&tag_exp=102482433~102788824~102803279~102813109&z=725750187 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816404568&pid=28851&conversionId=13043044&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816405416&pid=28851&conversionId=10249833&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%2
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A177435240541
Source: global traffic	HTTP traffic detected: GET /u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-6e1857665f026588f56c0f997eb6251&_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742816405805&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=2&rnd=897717&cdn_o=a&_biz_z=1742816406023 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=bb36af23766843629aedf7ebe52a09dd
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: application/signed-exchange;v=b3;q=0.7,*/*;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_
Source: global traffic	HTTP traffic detected: GET /log?vendor=liveramp&user_id=Xc1297dj8O_k5fSEOKLsiL9Pp6U8duSu_4QEk0HyzUp33xz2A HTTP/1.1Host: segments.company-target.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=1900650329.1742816404;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /validateCookie?vendor=liveramp&user_id=Xc1297dj8O_k5fSEOKLsiL9Pp6U8duSu_4QEk0HyzUp33xz2A&verifyHash=4a7388298e0337aec5c8ee06252b9dc777534935 HTTP/1.1Host: segments.company-target.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tuuid=9366c340-0994-4457-a26c-efaf742762b5; tuuid_lu=1742816407
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_sessi
Source: global traffic	HTTP traffic detected: GET /activity;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=1900650329.1742816404;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=1900650329.1742816404;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Attribution-Reporting-Eligible: trigger, event-source=navigation-sourceAttribution-Reporting-Support: web, not-osX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tap.php?nid=5578&put=b56ee438-8fcc-4f85-96bb-c380442b3363&v=1181926 HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1742816403908 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=81238157711014799232162088242494639092; dpm=81238157711014799232162088242494639092
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1758714007&external_user_id=b56ee438-8fcc-4f85-96bb-c380442b3363 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A174281
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=b56ee438-8fcc-4f85-96bb-c380442b3363 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742816404568&uuid=b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%
Source: global traffic	HTTP traffic detected: GET /activity;dc_pre=CNrFj4fRoowDFV-FpgQdZc0n7g;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=1900650329.1742816404;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmvyaQAiAXau80907UiOgx4f1sf1jPItVW_hlZ00Oed-3PoLi-1WF6sPS3wW8k
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-bdf509b905b7d415f8b7.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%2217428164054
Source: global traffic	HTTP traffic detected: GET /component---src-components-page-page-template-tsx-86f28de83faf58f598b9.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195c7f3-dcbd-7e6e-bf42-60933435da4d%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742816402845%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNrFj4fRoowDFV-FpgQdZc0n7g;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=*;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1758714007&external_user_id=b56ee438-8fcc-4f85-96bb-c380442b3363&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z.FEl9HM4yEAEuXGANFPowAA; CMPS=581; CMPRO=581
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%7D; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiZWQ0NDgxN
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&_biz_h=-1777624096&_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742816404792&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=625159&cdn_o=a&_biz_z=1742816404793 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=bb36af23766843629aedf7ebe52a09dd
Source: global traffic	HTTP traffic detected: GET /u?_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742816404796&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=520206&cdn_o=a&_biz_z=1742816404796 HTTP/1.1Host: cdn.bizibly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/v1/identity/acquire?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=fffac7ea-10d8-4eef-a460-039eed5f01aa HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=81238157711014799232162088242494639092
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDkyNjh9.dguW7jthV1Y1wgRcAJfVrR_xsANK7zX9ZiD1wf0suvY HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v3/ip.json?referrer=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&page=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&page_title=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tuuid=9366c340-0994-4457-a26c-efaf742762b5; tuuid_lu=1742816407
Source: global traffic	HTTP traffic detected: GET /attribution_trigger?pid=28851&time=1742816404785&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/9255e43d2cd61899/1742816406318/b371eeb9f6a33919bf0c078518101a9c6bf0212a625c795f63aa81b518207494/GLHXU8FZRKqGdLi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak8t2/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%22174281
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=e8b473bd-fbe9-4459-95fe-f8a6c253e1fe&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41860ec0-da47-4c28-9d0d-08646c5da723&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: muc_ads=33a9e9c8-8988-4b3e-b82a-ad4b826a24b4; __cf_bm=tqC2mMCmjCjWK3Z5SwUaIUmPDb7R85oEtdc.t9HkZJU-1742816406-1.0.1.1-h8bPrZWA6yPVM6GrS_SiDjWLiTSg6vtMG_YuuKQLXEQwlyA8zm4d0k0sLQVvNrB3d9dMeHC0yhffTQHjKAVVE9KrOyvOWz1c0wKNNPUwrSk
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z_FElQAAALYfugN2 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=81238157711014799232162088242494639092; dpm=81238157711014799232162088242494639092
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=0d3296c0-72e4-43ee-a2c3-e367ecec6ce7&_u=KGDAAEADQAAAAC%7E&z=1681343899&slf_rd=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%7D; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiZWQ0NDgxN
Source: global traffic	HTTP traffic detected: GET /u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_88976361176656194011568959402515125710&_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742816404797&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=1&rnd=273774&cdn_o=a&_biz_z=1742816405351 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=bb36af23766843629aedf7ebe52a09dd
Source: global traffic	HTTP traffic detected: GET /api/segment?pdata=d%3Ddesktop%2Clc%3DUS%2Cref%3D1a8373c42eb9c8cf30e85d4.tilbencx.com&pid=710030&redirect=1 HTTP/1.1Host: di.rlcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: rlas3=rihcIJZBQg/f3wmkLkkwXoaFwyQNuG5ovKXPHBpak3k=; pxrc=CJaJhb8GEgUI6AcQABIGCMrdKhAA
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1726219111:1742815561:gacixJewIk5m1vSMsSATXl_EXyN30J0fjhiibi5vFfY/9255e43d2cd61899/NaTzSS3EHee_wdCml6p77jlqMzyoU5a4zQxBCJGz1vI-1742816404-1.1.1.1-gL0LNdrVpGoipu3TCQA6JTUBHi7eqZcKO8u8NpiusRx6M5u50IO_3RDHhNB60lV7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%7D; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiZWQ0NDgxNTQtNTFlOC00MDZhLWFlNGItZjc0YTI0MzgwNmVjIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; _mk
Source: global traffic	HTTP traffic detected: GET /measurement/conversion/?random=1742816405697&cv=11&tid=G-SQCRB0TXZW&fst=1742816405697&fmt=6&en=first_visit&gtm=45je53j1v895724479z8890325950za200zb890325950&gcs=G111&gcd=13r3r3r3r5l1&dma=0&tag_exp=102482433~102788824~102803279~102813109&u_w=1280&u_h=1024&hl=en&gl=US&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&ref=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&gacid=897087927.1742816406&frm=0&tiba=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&npa=0&pscdl=label_only_3&auid=1900650329.1742816404&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=e8b473bd-fbe9-4459-95fe-f8a6c253e1fe&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=41860ec0-da47-4c28-9d0d-08646c5da723&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A174281640635968982; guest_id_ads=v1%3A174281640635968982; personalization_id="v1_WwCGl/ZlX161c0Ej/lJntA=="; guest_id=v1%3A174281640635968982; __cf_bm=a2QsJ6RCyJ3djHxoxSiFCqfIS2pnGGDOQ_Bosa30lkY-1742816406-1.0.1.1-3FNnpzbQBykQmyH9kaK1LwkDrECT0nDVD3nGw0nRaZ.MPme2R7mcYkT78_vaEpDGPKHC.49OLzKEBIDCUkkYw7qXmIS87am_Od0XV8GLc3c
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=ISS7hkB5e3M8xK5Aqzz6xXbrH8O2Uo9oH6JSat5cnSzcpYX3CtK_6w==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-6e1857665f026588f56c0f997eb6251&_biz_u=bb36af23766843629aedf7ebe52a09dd&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742816405805&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=2&rnd=897717&cdn_o=a&_biz_z=1742816406023 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=bb36af23766843629aedf7ebe52a09dd
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=28851&time=1742816404785&li_adsId=65567f06-3ec6-4694-b40a-cca11c104ab4&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816404568&pid=28851&conversionId=13043044&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816405416&pid=28851&conversionId=10249833&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9255e43d2cd61899/1742816406319/ucB64cR9XRVDofF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/ak8t2/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A177435
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%7D; __q_state
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%7D; __q_state_37pXYrro6wCZbsU7=e
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=a2fd642d-a33c-4b9c-8b8e-e2bcc8ea3e1a HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=8112d775-a574-49cf-a3d4-b11657ade41e HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/va6/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=4f447903-2b68-4510-b334-cf0a2fc3d86a HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /validateCookie?vendor=liveramp&user_id=Xc1297dj8O_k5fSEOKLsiL9Pp6U8duSu_4QEk0HyzUp33xz2A&verifyHash=4a7388298e0337aec5c8ee06252b9dc777534935 HTTP/1.1Host: segments.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tuuid=9366c340-0994-4457-a26c-efaf742762b5; tuuid_lu=1742816407
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=1900650329.1742816404;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY
Source: global traffic	HTTP traffic detected: GET /tap.php?nid=5578&put=b56ee438-8fcc-4f85-96bb-c380442b3363&v=1181926 HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8MZW2Q7-1X-B2PA; audit=1|icYloia2ImefLHLmQNfEb1NmOBnwnbzUcv33vzRQj6yMmcD0ztKOZg9IWJzN6CrPJAQ9ebQPp3AwHTRO1/p4iJLoYn4tEwhGMPS6Pn2LKEk3u7k3J+lm56NL+ZnPvGUsuwKTj6ltHfmQGWFO26xoa03tyCKEXnrGVFGxpdJGiDeWvEnWSmTsitzpQ7vzkXQ/
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CNrFj4fRoowDFV-FpgQdZc0n7g;src=9309168;type=a_pag0;cat=3_page;ord=759890265079;npa=0;auiddc=*;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=297366893;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=b56ee438-8fcc-4f85-96bb-c380442b3363 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tvid=0361338e331c46558c51cc3304d94ffd; tv_UIDM=b56ee438-8fcc-4f85-96bb-c380442b3363
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1758714007&external_user_id=b56ee438-8fcc-4f85-96bb-c380442b3363&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z.FEl9HM4yEAEuXGANFPowAA; CMPS=581; CMPRO=581
Source: global traffic	HTTP traffic detected: GET /l/dmVuZG9yPW1hcmlwb3NhJnAxPXFlaHVuLmNvbSZ0b2tlbj01TzhSMG01d1Bxb3J1Uk5UeERBR2J5ZmFoYk9EZjRLVnJqZ0ZYVG0x HTTP/1.1Host: segments.company-target.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-type: application/jsonsec-ch-ua-mobile: ?0Accept: */*Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tuuid=9366c340-0994-4457-a26c-efaf742762b5; tuuid_lu=1742816407
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/9255e43d2cd61899/1742816406319/ucB64cR9XRVDofF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%7D; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiZWQ0NDgxNTQtNTFlOC00MDZhLWFlNGItZjc0YTI0MzgwNmVjIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; _mkto_trk=id:713-XSC-918&token:_mch-cloudflare.com-6e1857665f026588f56c0f997eb6251; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY4ODk3NjM2MTE3NjY1NjE5NDAxMTU2ODk1OTQw
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=ed448154-51e8-406a-ae4b-f74a243806ec&wu=670b1888-476f-4bae-bc8a-69f0d5060177&ca=2025-03-24T11%3A40%3A05.241Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&pv=1&fv=2025-03-24-401f879c99&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: JAxG1ut5xZxy+TGNq1Ezlg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /l/dmVuZG9yPW1hcmlwb3NhJnAxPXFlaHVuLmNvbSZ0b2tlbj01TzhSMG01d1Bxb3J1Uk5UeERBR2J5ZmFoYk9EZjRLVnJqZ0ZYVG0x HTTP/1.1Host: segments.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tuuid=9366c340-0994-4457-a26c-efaf742762b5; tuuid_lu=1742816407
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1726219111:1742815561:gacixJewIk5m1vSMsSATXl_EXyN30J0fjhiibi5vFfY/9255e43d2cd61899/NaTzSS3EHee_wdCml6p77jlqMzyoU5a4zQxBCJGz1vI-1742816404-1.1.1.1-gL0LNdrVpGoipu3TCQA6JTUBHi7eqZcKO8u8NpiusRx6M5u50IO_3RDHhNB60lV7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%7D; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiZWQ0NDgxNTQtNTFlOC00MDZhLWFlNGItZjc0YTI0MzgwNmVjIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; _mk
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=ed448154-51e8-406a-ae4b-f74a243806ec&wu=670b1888-476f-4bae-bc8a-69f0d5060177&ca=2025-03-24T11%3A40%3A05.241Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&pv=1&fv=2025-03-24-401f879c99&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: p8GzFaS4EyfmBgjiwyOpDA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=ed448154-51e8-406a-ae4b-f74a243806ec&wu=670b1888-476f-4bae-bc8a-69f0d5060177&ca=2025-03-24T11%3A40%3A05.241Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&pv=1&fv=2025-03-24-401f879c99&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: as9PurcqAg/RHL11ffGk2g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=2674229362611;npa=0;auiddc=1900650329.1742816404;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1957614229;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY; receive-cookie-deprecation=1Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /activity;src=9309168;type=a_pri_pv;cat=0p_qual;ord=2674229362611;npa=0;auiddc=1900650329.1742816404;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1957614229;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY; receive-cookie-deprecation=1Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=2674229362611;npa=0;auiddc=1900650329.1742816404;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1957614229;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Attribution-Reporting-Eligible: event-source, trigger=navigation-sourceAttribution-Reporting-Support: web;osX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY; receive-cookie-deprecation=1Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=6693326100027;npa=0;auiddc=1900650329.1742816404;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1662889056;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY; receive-cookie-deprecation=1Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /activity;src=9309168;type=a_eng0;cat=3_timer;ord=6693326100027;npa=0;auiddc=1900650329.1742816404;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1662889056;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY; receive-cookie-deprecation=1Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_eng0;cat=3_timer;ord=6693326100027;npa=0;auiddc=1900650329.1742816404;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1662889056;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Attribution-Reporting-Eligible: trigger;navigation-source, event-sourceAttribution-Reporting-Support: web=osX-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY; receive-cookie-deprecation=1Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /activity;dc_pre=CKW6mJTRoowDFQCxpgQdqvscJQ;src=9309168;type=a_pri_pv;cat=0p_qual;ord=2674229362611;npa=0;auiddc=1900650329.1742816404;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1957614229;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY; receive-cookie-deprecation=1Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /activity;dc_pre=CJG7mJTRoowDFUOopgQdqEkHLg;src=9309168;type=a_eng0;cat=3_timer;ord=6693326100027;npa=0;auiddc=1900650329.1742816404;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1662889056;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY; receive-cookie-deprecation=1Sec-Cookie-Deprecation: label_only_3
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=2674229362611;npa=0;auiddc=1900650329.1742816404;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1957614229;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_eng0;cat=3_timer;ord=6693326100027;npa=0;auiddc=1900650329.1742816404;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1662889056;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102788824~102803279~102813109;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUkk0LD1_pITIgfove5l5fPsitKkWPK5PsJq-nV3gAXeX3K_tOsqpARzFeAY
Source: global traffic	HTTP traffic detected: GET /measurement/conversion/?random=1742816434071&cv=11&tid=G-SQCRB0TXZW&fst=1742816434071&fmt=6&en=timer_event&gtm=45je53j1v895724479z8890325950za200zb890325950&gcs=G111&gcd=13r3r3r3r5l1&dma=0&tag_exp=102482433~102788824~102803279~102813109&u_w=1280&u_h=1024&hl=en&gl=US&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&ref=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&gacid=897087927.1742816406&frm=0&tiba=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&npa=0&pscdl=label_only_3&auid=1900650329.1742816404&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=vVyx8T8CjmiYgGy.YbTluQPLQUQJCUvOgilCBrhaac4-1742816399-1.0.1.1-mATM6w5OZxe6QIhnNb99DIYaCoFFJPwdb7JG4DK8.W1COlqsE7vLd7O8htbV_0wkORS0pSqbVDjfwgOwbiF2EKIqKHia12eIfmeKOOkx6NiJnriiDLfOlkEEeqiPMp8d; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742816402846}; _lr_uf_-ykolez=dbd5b5f0-8b26-4a21-b4d2-6dc01ebdd4a4; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+24+2025+07%3A40%3A03+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=841e7445-2f32-4494-a5a5-953befef3e28&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; _gcl_au=1.1.1900650329.1742816404; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.238856059%22%2C%22e%22%3A1774352404568%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1631281709%22%2C%22e%22%3A1774352404568%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.223994566%22%2C%22e%22%3A1774352404568%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742816404568.1677945963%22%2C%22e%22%3A1774352404568%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742816404568.b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286%22%2C%22e%22%3A1774352404568%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=bb36af23766843629aedf7ebe52a09dd; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742816405416%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1774352405416%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c272c659-936d-4c26-8feb-592ea65ce51e%22%2C%22e%22%3A1774352405416%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22575708694%22%2C%22e%22%3A1742818205416%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%220d3296c0-72e4-43ee-a2c3-e367ecec6ce7%22%2C%22e%22%3A1774352405416%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742816405416%22%2C%22e%22%3A1774352405416%7D%7D; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiZWQ0NDgxN
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816435194&pid=28851&conversionId=20071137 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CKW6mJTRoowDFQCxpgQdqvscJQ;src=9309168;type=a_pri_pv;cat=0p_qual;ord=2674229362611;npa=0;auiddc=*;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1957614229;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJG7mJTRoowDFUOopgQdqEkHLg;src=9309168;type=a_eng0;cat=3_timer;ord=6693326100027;npa=0;auiddc=*;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1662889056;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816435194&pid=28851&conversionId=20071137 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: UserMatchHistory=AQLBQ90Y85tpRQAAAZXH8-mWs7IJep6Ik2TDlye2RFSwYcbv52t84PSKAXXE8i1LX6kDZlo8DYzpCA; AnalyticsSyncHistory=AQK8o0JH0hg9kgAAAZXH8-mW41D5xY9sKJHyghD0eRU7QUMNo-mN0lH__3rPUrlglEQKpAuQtjxqEyyZ-Zo6ng; li_sugr=9c4bd602-cacb-475d-a1c4-2b1938d2ea08; bcookie="v=2&7b1a28f8-c5ee-4b53-886f-86f6af1ea33e"; lidc="b=TGST04:s=T:r=T:a=T:p=T:g=3407:u=1:x=1:i=1742816405:t=1742902805:v=2:sig=AQEl2v_11_bIz83Wrk0PWdpKtdcxwU1r"; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJG7mJTRoowDFUOopgQdqEkHLg;src=9309168;type=a_eng0;cat=3_timer;ord=6693326100027;npa=0;auiddc=*;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1662889056;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CKW6mJTRoowDFQCxpgQdqvscJQ;src=9309168;type=a_pri_pv;cat=0p_qual;ord=2674229362611;npa=0;auiddc=*;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742816404358;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1957614229;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=label_only_3;frm=0;_tu=KlA;gtm=45fe53j1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102788824~102803279~102813109;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIW2yQEIorbJAQipncoBCOj/ygEIk6HLAQiKo8sBCIWgzQEY4eLOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195c7f3-dcbd-7e6e-bf42-60933435da4d&t=356a1ba4-d5fc-42f7-b36e-9aba0ff7850c&s=0&rs=0%2Ct&ct=96.21591054129799 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195c7f3-dcbd-7e6e-bf42-60933435da4d&t=356a1ba4-d5fc-42f7-b36e-9aba0ff7850c&s=0&rs=0%2Ct&ct=96.21591054129799 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=ed448154-51e8-406a-ae4b-f74a243806ec&wu=670b1888-476f-4bae-bc8a-69f0d5060177&ca=2025-03-24T11%3A40%3A05.241Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&pv=1&fv=2025-03-24-401f879c99&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: mo6+UTo78hv+Fagxg60ekg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195c7f3-dcbd-7e6e-bf42-60933435da4d&t=356a1ba4-d5fc-42f7-b36e-9aba0ff7850c&s=0&rs=0%2Ct&ct=96.21591054129799 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195c7f3-dcbd-7e6e-bf42-60933435da4d&t=356a1ba4-d5fc-42f7-b36e-9aba0ff7850c&s=0&rs=0%2Ct&ct=96.21591054129799 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195c7f3-dcbd-7e6e-bf42-60933435da4d&t=356a1ba4-d5fc-42f7-b36e-9aba0ff7850c&s=0&rs=0%2Ct&ct=96.21591054129799 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=ed448154-51e8-406a-ae4b-f74a243806ec&wu=670b1888-476f-4bae-bc8a-69f0d5060177&ca=2025-03-24T11%3A40%3A05.241Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2F1a8373c42eb9c8cf30e85d4.tilbencx.com%2F&pv=1&fv=2025-03-24-401f879c99&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: ku2mazXvVMnzdXiEPDZkRQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: */*If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: */*If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Found strings which match to known social media urls

Source: chromecache_150.1.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq||(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' || this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-f551afb0-db20-4de5-9d7d-7572c435c463%5C%22))%7D%22%2C%22order-id%22%3A%22f551afb0-db20-4de5-9d7d-7572c435c463%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]||function(){\n(w[q].q=w[q].q||[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-fc239f37-e4b2-46de-b34c-d2f207861c3b%5C%22))%7D%22%2C%22order-id%22%3A%22fc239f37-e4b2-46de-b34c-d2f207861c3b%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816404568&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,"mode":"no-cors"}],["https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742816404568&uuid=b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280",{"mode":"no-cors","keepalive":true,"credentials":"include"}]]})})(window,document)}ca
Source: chromecache_150.1.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq||(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' || this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-f551afb0-db20-4de5-9d7d-7572c435c463%5C%22))%7D%22%2C%22order-id%22%3A%22f551afb0-db20-4de5-9d7d-7572c435c463%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]||function(){\n(w[q].q=w[q].q||[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-fc239f37-e4b2-46de-b34c-d2f207861c3b%5C%22))%7D%22%2C%22order-id%22%3A%22fc239f37-e4b2-46de-b34c-d2f207861c3b%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742816404568&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,"mode":"no-cors"}],["https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742816404568&uuid=b43d8ad1-6ab0-4ee2-86f8-5f2c217f8286&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280",{"mode":"no-cors","keepalive":true,"credentials":"include"}]]})})(window,document)}ca
Source: chromecache_158.1.dr, chromecache_174.1.dr, chromecache_162.1.dr	String found in binary or memory: return f}KG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),MG=["www.youtube.com","www.youtube-nocookie.com"],NG,OG=!1; equals www.youtube.com (Youtube)
Source: chromecache_174.1.dr	String found in binary or memory: var ZF=function(a,b,c,d,e){var f=VC("fsl",c?"nv.mwt":"mwt",0),g;g=c?VC("fsl","nv.ids",[]):VC("fsl","ids",[]);if(!g.length)return!0;var k=$C(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!IB(k,KB(b, equals www.facebook.com (Facebook)

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: email.mg.versatilev.com
Source: global traffic	DNS traffic detected: DNS query: 1a8373c42eb9c8cf30e85d4.tilbencx.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cf-assets.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: performance.radar.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ot.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: api.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: scout-cdn.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: js.qualified.com
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: cloudflareinc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizibly.com
Source: global traffic	DNS traffic detected: DNS query: scout.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ws6.qualified.com
Source: global traffic	DNS traffic detected: DNS query: app.qualified.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: 713-xsc-918.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: r.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: segments.company-target.com
Source: global traffic	DNS traffic detected: DNS query: edge.adobedc.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.6380491553398095:1742811896:zZf_ge7-v4kIAdLxOvNtQAuTVhSytmtR3zG55R36tnk/9255e38a186e4f0b HTTP/1.1Host: 1a8373c42eb9c8cf30e85d4.tilbencx.comConnection: keep-aliveContent-Length: 16685sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://1a8373c42eb9c8cf30e85d4.tilbencx.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 24 Mar 2025 11:39:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ErQOumyNEh5sbbj7OZQOu40Hm1LZx%2BjEBR04aVUHd4H6WfycCdoytiDnkyO%2BUJUSO0tmNVOqg9qK3GwYoDHf7UiqS7wXICy8jPNFk0xlemC5gHTzle%2BDnhr4p3ct2uprf2tH2KQAp2g5trNFXw48D4S8kCx8KzE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Strict-Transport-Security: max-age=0Server: cloudflareCF-RAY: 9255e3df5c7a421f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 24 Mar 2025 11:40:01 GMTContent-Type: text/html; charset=UTF-8Content-Length: 7702Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="9255e42f3d6bda8d"x-content-options: nosniffx-frame-options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 24 Mar 2025 11:40:06 GMTContent-Type: application/json; charset=UTF-8Content-Length: 24Connection: closeAccess-Control-Allow-Origin: https://www.cloudflare.comAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Content-Type,AcceptAccess-Control-Allow-Methods: GET,POST,OPTIONSX-Robots-Tag: noindexReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DK%2BmubCb625RR0AZlqNP2h5PP1yqPx2u79Uk9B3cwhDHjcGmqBNiUjOnNiZNphPGwXtqWGYx9WL5Us5z85slDimx7RGxWyoC8PjteyzlngfK%2F1q2JH3dWMuT%2FjqCZIJd%2F%2BfQSo8uock%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9255e44b4b928465-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: fffac7ea-10d8-4eef-a460-039eed5f01aavary: Origindate: Mon, 24 Mar 2025 11:40:09 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 4f447903-2b68-4510-b334-cf0a2fc3d86avary: Origindate: Mon, 24 Mar 2025 11:40:10 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 8112d775-a574-49cf-a3d4-b11657ade41evary: Origindate: Mon, 24 Mar 2025 11:40:10 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: a2fd642d-a33c-4b9c-8b8e-e2bcc8ea3e1avary: Origindate: Mon, 24 Mar 2025 11:40:09 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: VA6;7server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

URLs found in memory or binary data

Source: chromecache_174.1.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_158.1.dr, chromecache_174.1.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_162.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_150.1.dr	String found in binary or memory: https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742816404568&uuid=b43d8ad1-6ab0-4ee
Source: chromecache_248.1.dr, chromecache_177.1.dr	String found in binary or memory: https://api.www.cloudflare.com/api/v1
Source: chromecache_203.1.dr	String found in binary or memory: https://app.qualified.com
Source: chromecache_166.1.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js
Source: chromecache_212.1.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti
Source: chromecache_138.1.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC392ad6d4bbf94c7283b4eda6cbf689a
Source: chromecache_221.1.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC55904e5e1abc4d38a5f1ac3dea0edaa
Source: chromecache_244.1.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js
Source: chromecache_158.1.dr, chromecache_174.1.dr, chromecache_162.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_192.1.dr, chromecache_132.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/17RhepZZwxiD452Hs0gKFk/5324e2c81dcdef79c74efea2c60
Source: chromecache_200.1.dr, chromecache_183.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2dlg4oApldWlYGAWdzwN7C/3b0f1908d3e4ca00a193c2fd679
Source: chromecache_206.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b
Source: chromecache_192.1.dr, chromecache_132.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3aiXyraQa82SPHcEOgsxLq/ace1025cc5204f2ca8885646b8b
Source: chromecache_134.1.dr, chromecache_137.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad8
Source: chromecache_134.1.dr, chromecache_137.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab
Source: chromecache_206.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264
Source: chromecache_247.1.dr, chromecache_135.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea69065480
Source: chromecache_247.1.dr, chromecache_135.1.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6
Source: chromecache_194.1.dr, chromecache_140.1.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_164.1.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1758714007&external_user_id=b56ee43
Source: chromecache_206.1.dr	String found in binary or memory: https://github.com/jonsuh/hamburgers
Source: chromecache_239.1.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_162.1.dr	String found in binary or memory: https://google.com
Source: chromecache_162.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_206.1.dr	String found in binary or memory: https://jonsuh.com/hamburgers
Source: chromecache_203.1.dr	String found in binary or memory: https://js.qualified.com
Source: chromecache_162.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_158.1.dr, chromecache_174.1.dr, chromecache_162.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_164.1.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=b56ee438-8fcc-4f85-96bb-c380442b3363
Source: chromecache_164.1.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=b56ee438-8fcc-4f85-96bb-c380442b3363&v
Source: chromecache_150.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Fac
Source: chromecache_150.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif
Source: chromecache_203.1.dr	String found in binary or memory: https://schedule.qualified.com
Source: chromecache_132.1.dr	String found in binary or memory: https://schema.org/Answer
Source: chromecache_206.1.dr	String found in binary or memory: https://schema.org/FAQPage
Source: chromecache_132.1.dr	String found in binary or memory: https://schema.org/Question
Source: chromecache_150.1.dr	String found in binary or memory: https://scout-cdn.salesloft.com/sl.js
Source: chromecache_144.1.dr, chromecache_215.1.dr	String found in binary or memory: https://scout.us4.salesloft.com
Source: chromecache_150.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_157.1.dr	String found in binary or memory: https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/
Source: chromecache_150.1.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_162.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_162.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_200.1.dr, chromecache_183.1.dr	String found in binary or memory: https://support.cloudflare.com/)
Source: chromecache_150.1.dr	String found in binary or memory: https://tag.demandbase.com/1be41a80498a5b73.min.js
Source: chromecache_158.1.dr, chromecache_174.1.dr, chromecache_162.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_192.1.dr, chromecache_132.1.dr	String found in binary or memory: https://unctad.org/page/data-protection-and-privacy-legislation-worldwide
Source: chromecache_248.1.dr, chromecache_177.1.dr	String found in binary or memory: https://www.cloudflare.com
Source: chromecache_223.1.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_223.1.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: chromecache_192.1.dr, chromecache_132.1.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-browser-isolation/
Source: chromecache_200.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.cloudflare.com/lp/forrester-tei-study-2024/
Source: chromecache_203.1.dr	String found in binary or memory: https://www.cloudflare.com/lp/multi-channel-phishing-demo?utm_medium=banner
Source: chromecache_165.1.dr, chromecache_218.1.dr	String found in binary or memory: https://www.cloudflare.com/saas/)
Source: chromecache_162.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_158.1.dr, chromecache_174.1.dr	String found in binary or memory: https://www.google.com/gmp/conversion;
Source: chromecache_162.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_162.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_158.1.dr, chromecache_174.1.dr, chromecache_162.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_158.1.dr, chromecache_174.1.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_158.1.dr, chromecache_174.1.dr, chromecache_162.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_162.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.8:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.102.239.211:443 -> 192.168.2.8:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.8:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.8:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.8:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.8:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.8:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.30.78:443 -> 192.168.2.8:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.8:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.8:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.57.57:443 -> 192.168.2.8:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.216.21.105:443 -> 192.168.2.8:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.8:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.85.61.39:443 -> 192.168.2.8:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.140:443 -> 192.168.2.8:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.71.178.49:443 -> 192.168.2.8:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.200.0.17:443 -> 192.168.2.8:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.36.108:443 -> 192.168.2.8:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.44.157:443 -> 192.168.2.8:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.72.105:443 -> 192.168.2.8:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.17.5:443 -> 192.168.2.8:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.91:443 -> 192.168.2.8:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.212.111:443 -> 192.168.2.8:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.8:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.206.243.141:443 -> 192.168.2.8:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.161.142:443 -> 192.168.2.8:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.218.25.109:443 -> 192.168.2.8:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.31.155:443 -> 192.168.2.8:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.147.11.29:443 -> 192.168.2.8:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.56:443 -> 192.168.2.8:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.71.22:443 -> 192.168.2.8:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.8:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.8:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.154.8:443 -> 192.168.2.8:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.8:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.16.5:443 -> 192.168.2.8:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.17.5:443 -> 192.168.2.8:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.8:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.8:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.68:443 -> 192.168.2.8:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.28.144.124:443 -> 192.168.2.8:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.66:443 -> 192.168.2.8:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.8:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.10:443 -> 192.168.2.8:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.189:443 -> 192.168.2.8:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.230:443 -> 192.168.2.8:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.230:443 -> 192.168.2.8:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.146.5:443 -> 192.168.2.8:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.211.206.91:443 -> 192.168.2.8:49875 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.8:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.161.194.228:443 -> 192.168.2.8:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.8:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.102:443 -> 192.168.2.8:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.226:443 -> 192.168.2.8:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.200.0.17:443 -> 192.168.2.8:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.219.161.142:443 -> 192.168.2.8:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 44.218.25.109:443 -> 192.168.2.8:49894 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.91:443 -> 192.168.2.8:49895 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.10:443 -> 192.168.2.8:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.8:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.8:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.8:49903 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.49.212.111:443 -> 192.168.2.8:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.165.132:443 -> 192.168.2.8:49909 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.8:49908 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.109:443 -> 192.168.2.8:49910 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.132:443 -> 192.168.2.8:49919 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.132:443 -> 192.168.2.8:49921 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.38.132:443 -> 192.168.2.8:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.10:443 -> 192.168.2.8:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.70:443 -> 192.168.2.8:49923 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.146.5:443 -> 192.168.2.8:49925 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.130:443 -> 192.168.2.8:49926 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.19.28.59:443 -> 192.168.2.8:49924 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.8:49927 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.94.10:443 -> 192.168.2.8:49928 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.8:49946 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.70:443 -> 192.168.2.8:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.166:443 -> 192.168.2.8:49964 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.8:49979 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.8:49980 version: TLS 1.2

System Summary

Creates files inside the system directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir4960_333374283

Jump to behavior

Deletes files inside the Windows folder

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir4960_333374283

Jump to behavior

Classification label

Source: classification engine

Classification label: mal64.phis.evad.win@30/209@187/61

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,7044412258961366349,9990552363652380326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2088 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://email.mg.versatilev.com/c/eJwczMFtxSAMANBp4BgZ28Rw4NBL9gDH9CPlt1GCoo5ftQO8txdtHLp4K0EYOWVI4l-l7mnFGljyHiCAUYtkGKW2Hlfp7EdBwAiEEFZmlkWppZyjMWmutIpjeH8uj113neOwZ9Hvtz_Ka87zdvThcHO4hZpISBmtZU3aCSzFnZc5jmZf-vOHHG7-Kuc11E7HcNeh_9dT8DcAAP__O8c2mA"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,7044412258961366349,9990552363652380326,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2088 /prefetch:3			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: dropped/chromecache_239, type: DROPPED