Edit tour

Windows Analysis Report
https://jainiklifesciences.com/proposals

Overview

General Information

Sample URL:	https://jainiklifesciences.com/proposals
Analysis ID:	1647620
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish54

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Form action URLs do not match main URL

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains obfuscated script src

HTML title does not match URL

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6616 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,15264985258537942320,13890307375095254637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7144 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jainiklifesciences.com/proposals" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.18..script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.15.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.17.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://jainiklifesciences.com/offers/box.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Box' is a well-known cloud content management and file sharing service., The URL 'jainiklifesciences.com' does not match the legitimate domain 'box.com'., The domain 'jainiklifesciences.com' does not appear to be associated with the brand 'Box'., The presence of an input field asking for a business email on a non-associated domain is suspicious., The domain name 'jainiklifesciences.com' does not contain any elements that suggest a connection to 'Box'. DOM: 1.1.pages.csv
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'f7489275.1b3323017e50b50a29be84d5.workers.dev' does not match the legitimate domain 'microsoft.com'., The domain 'workers.dev' is a generic domain often used for cloud services, which can be legitimate but is not directly associated with Microsoft., The presence of a long alphanumeric subdomain 'f7489275.1b3323017e50b50a29be84d5' is suspicious and not typical for official Microsoft URLs., There is no direct association between the URL and the brand 'Microsoft'. DOM: 2.15.pages.csv
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'f7489275.1b3323017e50b50a29be84d5.workers.dev' does not match the legitimate domain 'microsoft.com'., The domain 'workers.dev' is a generic domain often used for cloud services, which can be legitimate but is not directly associated with Microsoft., The presence of a long alphanumeric subdomain 'f7489275.1b3323017e50b50a29be84d5' is suspicious and not typical for official Microsoft URLs., There is no direct association between the URL and the brand 'Microsoft'. DOM: 2.17.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 2.18..script.csv, type: HTML
Source: Yara match	File source: 2.15.pages.csv, type: HTML
Source: Yara match	File source: 2.17.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://jainiklifesciences.com/proposals/... This script demonstrates several high-risk behaviors, including disabling right-click and various keyboard shortcuts, preventing the use of debugging tools, and redirecting users to an external domain. The script also includes an attempt to detect and block bots, which could be used to bypass security measures. Overall, the combination of these behaviors suggests a high-risk script that is likely attempting to restrict user interaction and potentially engage in malicious activities.
Source: 2.16..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://f7489275.1b3323017e50b50a29be84d5.workers.... The provided JavaScript snippet uses the `atob()` function to decode a base64-encoded string, which reveals an HTML document that includes an `iframe` element pointing to a potentially suspicious domain (`eragon.co.in`). This behavior is indicative of dynamic code execution and potential data exfiltration, which are high-risk indicators. Additionally, the use of an obfuscated URL further increases the risk score. Overall, this script demonstrates highly suspicious behavior and should be considered a high-risk security threat.

Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: Form action: https://eragonn.co.in/common/login workers co
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: Form action: https://eragonn.co.in/common/login workers co

Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Number of links: 0
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: Number of links: 0

Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com

HTTP Parser: Base64 decoded: <!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"></head><body style="margin:0;padding:0"><iframe src="https://eragonn.co.in/?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczov...

Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gYygpe2lmKCFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuYiIpIHx8ICFkb2N1bWVudC5xdWVyeVNlbGVjdG9yKCIuZyIpKXtkb2N1bWVudC5oZWFkLmFwcGVuZENoaWxkKE9iamVjdC5hc3NpZ24oZG9jdW1lbnQuY3JlYXRlRWxlbWVudCgiZGl2Iikse2NsYXNzTGlzdDpbImIiXX

Source: https://jainiklifesciences.com/offers/box.html

HTTP Parser: Title: Construction Bid Invitation - Secure Access does not match URL

Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html#frame=checkbox&id=0gwuerb0z62m&host=jainiklifesciences.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&theme=light&origin=https%3A%2F%2Fjainiklifesciences.com
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html#frame=challenge&id=0gwuerb0z62m&host=jainiklifesciences.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&theme=light&origin=https%3A%2F%2Fjainiklifesciences.com
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html#frame=checkbox&id=0gwuerb0z62m&host=jainiklifesciences.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&theme=light&origin=https%3A%2F%2Fjainiklifesciences.com
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html#frame=challenge&id=0gwuerb0z62m&host=jainiklifesciences.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&theme=light&origin=https%3A%2F%2Fjainiklifesciences.com
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html#frame=checkbox&id=0gwuerb0z62m&host=jainiklifesciences.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&theme=light&origin=https%3A%2F%2Fjainiklifesciences.com
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html#frame=challenge&id=0gwuerb0z62m&host=jainiklifesciences.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&theme=light&origin=https%3A%2F%2Fjainiklifesciences.com
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: Iframe src: https://portal.microsoftonline.com/Prefetch/Prefetch.aspx

Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com

HTTP Parser: <input type="password" .../> found

Source: https://jainiklifesciences.com/proposals/	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No favicon

Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No <meta name="author".. found
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No <meta name="author".. found
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No <meta name="author".. found
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No <meta name="author".. found
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No <meta name="author".. found

Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No <meta name="copyright".. found
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No <meta name="copyright".. found
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No <meta name="copyright".. found
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No <meta name="copyright".. found
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.com	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.17:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.17:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.17:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.17:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.17:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.17:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.17:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.17:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.17:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:50030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.17:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.17:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.17:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.17:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.243.74:443 -> 192.168.2.17:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.156:443 -> 192.168.2.17:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50069 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.72:443 -> 192.168.2.17:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.72:443 -> 192.168.2.17:50083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:50085 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.195
Source: unknown	TCP traffic detected without corresponding DNS query: 184.86.251.25
Source: unknown	TCP traffic detected without corresponding DNS query: 184.86.251.25
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /proposals HTTP/1.1Host: jainiklifesciences.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /proposals/ HTTP/1.1Host: jainiklifesciences.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jainiklifesciences.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jainiklifesciences.com/proposals/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/box.html HTTP/1.1Host: jainiklifesciences.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://jainiklifesciences.com/proposals/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bNn6VR8f/box.jpg HTTP/1.1Host: i.postimg.ccConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v5s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /zGhnTT6t/image-1.png HTTP/1.1Host: i.postimg.ccConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /bNn6VR8f/box.jpg HTTP/1.1Host: i.postimg.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /getcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/challenge/image_drag_drop/challenge.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /tip/3a46c8b697a72f34f1affa266db7cc03e69b04c2d8f8d27c5b20dcee2f1c9a30/743b28901cb408b3eef0e5d1eed0f2b71d43dd84b4c762212791d2bcf2b0cfdb.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/29941ace46e5cc516842a3fc792d47723f804d7cff936bf7b8188709807fca94/e11898e5a78d8ea6019bc4311e0edc4c7e9a3a5bbe6d4f9b7dfd3a80846effcf.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveOrigin: https://newassets.hcaptcha.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /tip/3a46c8b697a72f34f1affa266db7cc03e69b04c2d8f8d27c5b20dcee2f1c9a30/743b28901cb408b3eef0e5d1eed0f2b71d43dd84b4c762212791d2bcf2b0cfdb.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /tip/29941ace46e5cc516842a3fc792d47723f804d7cff936bf7b8188709807fca94/e11898e5a78d8ea6019bc4311e0edc4c7e9a3a5bbe6d4f9b7dfd3a80846effcf.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /getcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/168ee24b316d3b5717af980561734a32d396e29f434e9e6d785e3870e19c1ae7/5b4941f68f14e166f6e4d18ccee79ddf6d0ecd21dce925339ce9447ba6cfd5db.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveOrigin: https://newassets.hcaptcha.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/1a043b2eafff85afc780d8beae332812ade519a5a9998fa15b301b8ea0bf04fc/97e51e25af2dfd0e7b30bd104911e7bf247811beda4630fb3b968c97e92157e0.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/1a043b2eafff85afc780d8beae332812ade519a5a9998fa15b301b8ea0bf04fc/97e51e25af2dfd0e7b30bd104911e7bf247811beda4630fb3b968c97e92157e0.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/168ee24b316d3b5717af980561734a32d396e29f434e9e6d785e3870e19c1ae7/5b4941f68f14e166f6e4d18ccee79ddf6d0ecd21dce925339ce9447ba6cfd5db.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiL0xjQ3RqdzkweHZiSVBudHR1OUlsZ1VxRTI0b3lBNmFHbnpWNnJYSEhtK3dkRHFrejBZa0NDc2hrS2xyOC9XUnZnTkUrclhwWENFUHBpdTNGNkNiRHdmd0RxUHFQYmc0dGcvZ0ZVeEp5b0g3WklTcU80NXZxdG53Q2RKM080MnUwZFQ1T2pkMEdPUEtIMkJ1eFBTODd2QlordVpseVFJYndBVVZhanVZWnVOQW16citPM1o1aG4wdFJoY3lqQTlwcmhnQjdUb0ljaG9zSjNsWXNtd3orQjhFbDhucmVLNzl5SjRMZFg5NGJmMHdjOCtiS1NlTlQ5b2dFVHFGTldWZDQrR0diL0tLZzF3PWtBYmJVZDlobm5FNUo5NXciLCJleHAiOjE3NDI4NzEyMzEsImtyIjoiYWUzYmI5MiJ9.gAdcaBFvVT52C0B8LvnDn6yU1Pif7peLaoAhEZthMBU HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ref=jtondom@bigge.com HTTP/1.1Host: f7489275.1b3323017e50b50a29be84d5.workers.devConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/Joe12387/detectIncognito@main/dist/es5/detectIncognito.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/validate-captcha.php HTTP/1.1Host: jainiklifesciences.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d1afbb39bb2d4db1365df6c253fa467b
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/obsru/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925b1d156d950f68&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/obsru/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/obsru/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: f7489275.1b3323017e50b50a29be84d5.workers.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.comAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: f7489275.1b3323017e50b50a29be84d5.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/31400865:1742869629:11mdbk3JlueIVBYJ6WM7PYQzpW410p0zzKJvPW1iF9Y/925b1d156d950f68/7h4VfVLjuidmpDCgfuCWvxQRv5pWuhu3u1xvSHLtnt8-1742871161-1.1.1.1-LzX1r1ajbiaRaNqTkOf4h8QD5odfy5UjXsfzbzSwo6csxNoKd84QNyNZ2V3qyzqZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/925b1d156d950f68/1742871162457/14ac903baa238b51d356418ebd223e249db9133136b0065838b9d1d0d2072977/rESFCf4FQMPCe31 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/obsru/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925b1d156d950f68/1742871162457/tCu18jZuT7kOVIk HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/obsru/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925b1d156d950f68/1742871162457/tCu18jZuT7kOVIk HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/31400865:1742869629:11mdbk3JlueIVBYJ6WM7PYQzpW410p0zzKJvPW1iF9Y/925b1d156d950f68/7h4VfVLjuidmpDCgfuCWvxQRv5pWuhu3u1xvSHLtnt8-1742871161-1.1.1.1-LzX1r1ajbiaRaNqTkOf4h8QD5odfy5UjXsfzbzSwo6csxNoKd84QNyNZ2V3qyzqZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/31400865:1742869629:11mdbk3JlueIVBYJ6WM7PYQzpW410p0zzKJvPW1iF9Y/925b1d156d950f68/7h4VfVLjuidmpDCgfuCWvxQRv5pWuhu3u1xvSHLtnt8-1742871161-1.1.1.1-LzX1r1ajbiaRaNqTkOf4h8QD5odfy5UjXsfzbzSwo6csxNoKd84QNyNZ2V3qyzqZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?sign=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL2VyYWdvbm4uY28uaW4vIiwiZG9tYWluIjoiZXJhZ29ubi5jby5pbiIsImtleSI6Ind3RnJpTkNRaVpzbiIsInJlZiI6Imp0b25kb21AYmlnZ2UuY29tIiwiaWF0IjoxNzQyODcxMTczLCJleHAiOjE3NDI4NzEyOTN9.B5uxOUfZZ7an2oeuTqf_uDuQ2cZ-AZwEN7G584abR90&ref=jtondom@bigge.com HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqo HTTP/1.1Host: eragonn.co.inConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/js/ConvergedLogin_PCore_GjP1RdcVSKf6ASC7mgkR1g2.js HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_r1sg5sxlkljjoa22hvk04g2.js HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: portal.microsoftonline.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_80e93b9a4cb13643afca.js HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: f7489275.1b3323017e50b50a29be84d5.workers.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=jtondom@bigge.comAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: f7489275.1b3323017e50b50a29be84d5.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: eragonn.co.inConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: eragonn.co.inConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: eragonn.co.inConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_white_166de53471265253ab3a456defe6da23.gif HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msauth.net/~/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_f7b06b70c72b4590b779.js HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: eragonn.co.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/index.html//?uuq_tgnqcf=vtwg&tgh=lvqpfqo%62dkiig.eqoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-jovrdkvfwovzc2nip-hn27hreryk74cxefmq-cnbqrk/logintenantbranding/0/illustration?ts=636020407026172462 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-jovrdkvfwovzc2nip-hn27hreryk74cxefmq-cnbqrk/logintenantbranding/0/bannerlogo?ts=636020406978413531 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://eragonn.co.in/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aadcdn.msftauth.net/~/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: eragonn.co.inConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: qPdM=wwFriNCQiZsn; qPdM.sig=G4IMPZTzM75V5sAF59A-372s6ws; buid=1.ARIAqzBRR7ViQUKp00fjfJvCFakreHKQRANPjYJWI3DqNWYBAAASAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQEd-ItkAjIF98QAmOVnZEUPsN6mMuLXXovIi6jORPTnGH0t7VbyXrBrYJYCNtn_vbMyKegIiebeTd1NuHQfjNEo2ZG1He7yiuE_PruQyHaFxsgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEQGNdA6OhWaUKLCL5n-wwT0giRkDc-lm7IqTdPD-LJp_05SPcGRjvAJPt91suQXvyVjRhGvQVtqy9vCK93bqKHh9YxkH546e94jV1WTZlJyyL628tV9UdOdIW26tjsTy5t3vJQUjxmHEumjzoK4CkGdTS8TRCPv942QcvDjav-1kgAA; esctx-ud2ginOf37Q=AQABCQEAAABVrSpeuWamRam2jAF1XRQE5NEl3dIrfA-jErSq8ShQO2NaIXvBaN9I52ZEVJ3yVH-vcNE7Xpv2ErQqmzYOPaSCx4J0vTqLONMGVVSJqsJeOSVQNxGpqLbwTV0r7VlI1m1qhsG6VTFQcLb357J2z0xMkK02iJgN4eJL5xJvZ4lTyCAA; fpc=Ak7pb0U3-yhKh2bGGsFgwS64vjNwAQAAAIURdN8OAAAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; brcap=0; bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-jovrdkvfwovzc2nip-hn27hreryk74cxefmq-cnbqrk/logintenantbranding/0/bannerlogo?ts=636020406978413531 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-jovrdkvfwovzc2nip-hn27hreryk74cxefmq-cnbqrk/logintenantbranding/0/illustration?ts=636020407026172462 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: jainiklifesciences.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: i.postimg.cc
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: api.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: imgs3.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: f7489275.1b3323017e50b50a29be84d5.workers.dev
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: eragonn.co.in
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: portal.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauthimages.net

Source: unknown

HTTP traffic detected: POST /checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/jsonsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plainsec-ch-ua-mobile: ?0Origin: https://newassets.hcaptcha.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 25 Mar 2025 02:51:23 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 315Connection: closeVary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 9ebad3a6-601e-0027-1c31-9d96a3000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:52:56 GMTConnection: closeAkamai-GRN: 0.8904d217.1742871176.a5d57f7Set-Cookie: ak_bmsc=7AA0885FA38EB5D7CFBA8577266F8533~000000000000000000000000000000~YAAQiQTSFycF8KOVAQAA+aM3yxtpu1HA/ysIyLCDN79qXgSAeT0tTNbbUfgCi35MnOdzqzRH64gA921m9SJSCyYIPHdOK61cIv2y8xQUzHStuauN6+ksdmjCnTThClnxkdoxZ0PEPJHC/pjL04Bi9pairVKuStoGFMwobworPkLOh7jxYwtRQ1exI6nFuTKnJjsEOZ5xF3CXmh+uy5HoQtVvC19EsJrGO6vxDd+Ct7LXd2Wjt4fy2QTbW50oelsHyhKJO9AGVKnpRAKeRCumPui8QkZ69wir2m6DFZFjGiIuIczS/wdHlTXMXAbTTjUtXJr0FZU/B8v3oeyMjz1wBs/RvbwpBG1fJnGF3w==; Domain=eragonn.co.in; Path=/; Expires=Tue, 25 Mar 2025 04:52:56 GMT; Max-Age=7200; SameSite=None; SecureStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 9f12ff71-e01e-00d3-5130-9d88fc000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:52:56 GMTConnection: closeAkamai-GRN: 0.8904d217.1742871176.a5d583eStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: no-store, no-cacheContent-Length: 1245Content-Type: text/htmlSet-Cookie: s.SessID=348898ea-73e1-4e1e-9e92-5ad5577a7ebf; path=/; secure; HttpOnly; SameSite=NoneSet-Cookie: s.SessID=348898ea-73e1-4e1e-9e92-5ad5577a7ebf; path=/; secure; HttpOnly; SameSite=NoneSet-Cookie: x-portal-routekey=eus; path=/; secure; HttpOnlyx-ms-correlation-id: 146737ad-4058-46bc-a523-b805389ee043X-Content-Type-Options: nosniffX-UA-Compatible: IE=EdgeX-Cache: CONFIG_NOCACHEX-MSEdge-Ref: Ref A: F07FDE9D13B8465D954D62E171E47947 Ref B: EWR311000103009 Ref C: 2025-03-25T02:52:56ZDate: Tue, 25 Mar 2025 02:52:56 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 808a7b8f-e01e-00bf-1031-9db6c2000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:52:57 GMTConnection: closeAkamai-GRN: 0.8904d217.1742871176.a5d5880Set-Cookie: bm_sv=0AE7DE40C810EFD947F633B8BA14E356~YAAQiQTSFygF8KOVAQAAfac3yxvWodc2FcSsm2wZdxCtvRTTS7/NLsov9mtZvuV1ZjBDQ4/wh2O5XK+wvBBziHWnLLH4sNCpar6HejMTmeYtKAUsEaAODVQ/h+T4+yFW+EGtmarjdeha8bmotAiix4/PrWHImiMgSgRI6IQjozGFBTE63PFJhZykwjt7mg9C7T/488WPrtXQEDspwqfGjIbJnkqINwLG7XWpfx8eac0/1CQBZ6+KlqcIM9f8oC2wdH4=~1; Domain=eragonn.co.in; Path=/; Expires=Tue, 25 Mar 2025 04:52:57 GMT; Max-Age=7200; SameSite=None; SecureStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 872d6603-601e-004e-1c30-9de4a4000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:53:01 GMTConnection: closeAkamai-GRN: 0.8904d217.1742871181.a5d5ac2Strict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 0ae60448-e01e-0074-2530-9db597000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:53:01 GMTConnection: closeAkamai-GRN: 0.8904d217.1742871181.a5d5ac4Strict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 872d6603-601e-004e-1c30-9de4a4000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:53:16 GMTConnection: closeAkamai-GRN: 0.8904d217.1742871196.a5d6265Strict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 0ae60448-e01e-0074-2530-9db597000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:53:16 GMTConnection: closeAkamai-GRN: 0.9f04d217.1742871196.f928484Strict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 872d6603-601e-004e-1c30-9de4a4000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:53:16 GMTConnection: closeAkamai-GRN: 0.9f04d217.1742871196.f9284cbStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 0ae60448-e01e-0074-2530-9db597000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:53:16 GMTConnection: closeAkamai-GRN: 0.9f04d217.1742871196.f9284cdStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-length: 829Content-Type: text/htmlx-ms-error-code: WebContentNotFoundx-ms-request-id: 3652fa9e-d01e-0039-1131-9d3130000000x-ms-version: 2018-03-28Access-Control-Expose-Headers: Content-Length,Content-Type,Date,Server,x-ms-error-code,x-ms-request-id,x-ms-versionAccess-Control-Allow-Origin: Date: Tue, 25 Mar 2025 02:53:16 GMTConnection: closeAkamai-GRN: 0.9f04d217.1742871196.f9284ccStrict-Transport-Security: max-age=31536000; includeSubDomainsX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINContent-Security-Policy: default-src data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * http://* https://* file://* about: javascript: data: blob:; connect-src * data: blob: 'unsafe-inline'

Source: chromecache_111.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_111.1.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_111.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_113.1.dr, chromecache_97.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/Joe12387/detectIncognito
Source: chromecache_113.1.dr, chromecache_97.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_88.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_87.1.dr	String found in binary or memory: https://github.com/Joe12387/detectIncognito
Source: chromecache_84.1.dr	String found in binary or memory: https://google.com
Source: chromecache_125.1.dr, chromecache_102.1.dr, chromecache_96.1.dr	String found in binary or memory: https://hcaptcha.com/license
Source: chromecache_82.1.dr	String found in binary or memory: https://i.postimg.cc/bNn6VR8f/box.jpg
Source: chromecache_82.1.dr	String found in binary or memory: https://i.postimg.cc/zGhnTT6t/image-1.png
Source: chromecache_82.1.dr	String found in binary or memory: https://js.hcaptcha.com/1/api.js
Source: chromecache_111.1.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039

Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.17:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.17:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.17:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.17:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.17:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.17:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.17:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.17:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.17:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.17:49871 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.17:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:50027 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:50026 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.17:50029 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:50030 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.17:50028 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:50032 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.17:50035 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.17:50037 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50050 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.31:443 -> 192.168.2.17:50055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.55.243.74:443 -> 192.168.2.17:50061 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.6.156:443 -> 192.168.2.17:50062 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50070 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50069 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50078 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 159.65.229.3:443 -> 192.168.2.17:50079 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.72:443 -> 192.168.2.17:50082 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.72:443 -> 192.168.2.17:50083 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.40:443 -> 192.168.2.17:50085 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6616_31541445

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6616_31541445

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@28/92@48/19

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,15264985258537942320,13890307375095254637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jainiklifesciences.com/proposals"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,15264985258537942320,13890307375095254637,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://jainiklifesciences.com/proposals	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://jainiklifesciences.com/favicon.ico	0%	Avira URL Cloud	safe
https://eragonn.co.in/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif	0%	Avira URL Cloud	safe
https://eragonn.co.in/aadcdn.msftauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	0%	Avira URL Cloud	safe
https://eragonn.co.in/aadcdn.msftauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	0%	Avira URL Cloud	safe
https://eragonn.co.in/aadcdn.msftauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
e329293.dscd.akamaiedge.net	23.209.72.31	true	false	high
api.hcaptcha.com	104.19.229.21	true	false	high
s-part-0044.t-0009.t-msedge.net	13.107.246.72	true	false	high
i.postimg.cc	162.249.168.129	true	false	high
b-0004.b-msedge.net	13.107.6.156	true	false	high
imgs3.hcaptcha.com	104.19.230.21	true	false	high
a1894.dscb.akamai.net	23.55.243.74	true	false	high
f7489275.1b3323017e50b50a29be84d5.workers.dev	104.21.64.1	true	false	high
s-part-0010.t-0009.t-msedge.net	13.107.246.38	true	false	high
js.hcaptcha.com	104.19.230.21	true	false	high
eragonn.co.in	159.65.229.3	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
jainiklifesciences.com	103.16.100.157	true	false	high
www.google.com	142.251.40.228	true	false	high
newassets.hcaptcha.com	104.19.229.21	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
aadcdn.msftauthimages.net	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
portal.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/rule701151v1s19.xml	false		high
https://api.hcaptcha.com/checkcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiL0xjQ3RqdzkweHZiSVBudHR1OUlsZ1VxRTI0b3lBNmFHbnpWNnJYSEhtK3dkRHFrejBZa0NDc2hrS2xyOC9XUnZnTkUrclhwWENFUHBpdTNGNkNiRHdmd0RxUHFQYmc0dGcvZ0ZVeEp5b0g3WklTcU80NXZxdG53Q2RKM080MnUwZFQ1T2pkMEdPUEtIMkJ1eFBTODd2QlordVpseVFJYndBVVZhanVZWnVOQW16citPM1o1aG4wdFJoY3lqQTlwcmhnQjdUb0ljaG9zSjNsWXNtd3orQjhFbDhucmVLNzl5SjRMZFg5NGJmMHdjOCtiS1NlTlQ5b2dFVHFGTldWZDQrR0diL0tLZzF3PWtBYmJVZDlobm5FNUo5NXciLCJleHAiOjE3NDI4NzEyMzEsImtyIjoiYWUzYmI5MiJ9.gAdcaBFvVT52C0B8LvnDn6yU1Pif7peLaoAhEZthMBU	false		high
https://otelrules.svc.static.microsoft/rules/rule704001v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703151v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120630v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120645v0s19.xml	false		high
https://i.postimg.cc/zGhnTT6t/image-1.png	false		high
https://otelrules.svc.static.microsoft/rules/rule700001v2s19.xml	false		high
https://eragonn.co.in/aadcdn.msftauth.net/~/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule701751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120663v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701301v1s19.xml	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://otelrules.svc.static.microsoft/rules/rule702751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120609v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120627v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703601v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700751v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700301v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700550v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703400v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701100v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700400v2s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701901v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120635v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703850v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702901v1s19.xml	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/obsru/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/	false		high
https://otelrules.svc.static.microsoft/rules/rule120612v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120681v0s19.xml	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/925b1d156d950f68/1742871162457/14ac903baa238b51d356418ebd223e249db9133136b0065838b9d1d0d2072977/rESFCf4FQMPCe31	false		high
https://otelrules.svc.static.microsoft/rules/rule120640v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702000v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702450v1s19.xml	false		high
https://imgs3.hcaptcha.com/tip/1a043b2eafff85afc780d8beae332812ade519a5a9998fa15b301b8ea0bf04fc/97e51e25af2dfd0e7b30bd104911e7bf247811beda4630fb3b968c97e92157e0.png	false		high
https://otelrules.svc.static.microsoft/rules/rule120617v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703750v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703300v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700450v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701700v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702700v1s19.xml	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/31400865:1742869629:11mdbk3JlueIVBYJ6WM7PYQzpW410p0zzKJvPW1iF9Y/925b1d156d950f68/7h4VfVLjuidmpDCgfuCWvxQRv5pWuhu3u1xvSHLtnt8-1742871161-1.1.1.1-LzX1r1ajbiaRaNqTkOf4h8QD5odfy5UjXsfzbzSwo6csxNoKd84QNyNZ2V3qyzqZ	false		high
https://jainiklifesciences.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule700851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703701v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702851v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120619v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule700600v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120625v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120622v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120653v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702600v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120647v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule224900v0s19.xml	false		high
https://eragonn.co.in/aadcdn.msftauth.net/~/shared/1.0/content/js/oneDs_641b1cf809bdc17b42ab.js	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule703100v1s19.xml	false		high
https://i.postimg.cc/bNn6VR8f/box.jpg	false		high
https://otelrules.svc.static.microsoft/rules/rule120668v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702100v1s19.xml	false		high
https://eragonn.co.in/aadcdn.msftauth.net/~/shared/1.0/content/images/marching_ants_b540a8e518037192e32c4fe58bf2dbab.gif	false	Avira URL Cloud: safe	unknown
https://portal.microsoftonline.com/Prefetch/Prefetch.aspx	false		high
https://otelrules.svc.static.microsoft/rules/rule120620v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703351v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120128v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120650v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703551v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120661v0s19.xml	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925b1d156d950f68&lang=auto	false		high
https://otelrules.svc.static.microsoft/rules/rule120655v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120614v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/other-Win32-v19.bundle	false		high
https://otelrules.svc.static.microsoft/rules/rule702350v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120639v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule701050v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704200v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702200v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule704050v0s19.xml	false		high
https://eragonn.co.in/aadcdn.msftauth.net/~/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false	Avira URL Cloud: safe	unknown
https://otelrules.svc.static.microsoft/rules/rule700350v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120648v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120657v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule702500v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule120660v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703500v0s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703950v0s19.xml	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/Joe12387/detectIncognito	chromecache_87.1.dr	false	high
https://cdn.jsdelivr.net/gh/Joe12387/detectIncognito	chromecache_113.1.dr, chromecache_97.1.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_111.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.6.156	b-0004.b-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.40	s-part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
159.65.229.3	eragonn.co.in	United States	14061	DIGITALOCEAN-ASNUS	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
104.21.64.1	f7489275.1b3323017e50b50a29be84d5.workers.dev	United States	13335	CLOUDFLARENETUS	false
104.21.96.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.19.230.21	imgs3.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
23.209.72.31	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.72	s-part-0044.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
103.16.100.157	jainiklifesciences.com	India	132563	MEGAHOSTZONE-AS-INMegaHostZoneIN	false
162.249.168.129	i.postimg.cc	United States	26548	PUREVOLTAGE-INCUS	false
104.19.229.21	api.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
23.55.243.74	a1894.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.17
192.168.2.24
192.168.2.25

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647620
Start date and time:	2025-03-25 03:50:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://jainiklifesciences.com/proposals
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@28/92@48/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.35.163, 142.250.80.14, 142.250.65.174, 142.251.167.84, 142.251.35.174, 142.250.176.206, 172.217.165.142, 142.251.40.202, 142.250.80.99, 142.250.176.202, 142.250.80.106, 142.251.40.170, 142.251.40.234, 142.251.35.170, 142.250.64.74, 142.250.80.42, 142.250.80.74, 142.251.32.106, 142.250.72.106, 142.251.40.138, 142.250.81.234, 142.251.40.106, 142.250.65.234, 142.250.64.106, 142.251.40.206, 142.250.65.206, 142.251.41.14, 142.250.81.238, 142.250.72.110, 142.251.32.99, 142.251.40.110, 142.250.31.84, 142.250.80.67, 142.250.80.78, 20.190.152.21, 40.126.24.83, 40.126.24.84, 40.126.24.147, 40.126.24.81, 40.126.24.146, 40.126.24.149, 40.126.24.82, 142.250.65.170, 142.250.80.10, 172.217.165.138, 142.250.65.202, 142.251.41.10, 172.253.122.84, 4.245.163.56, 23.204.23.20, 20.109.210.53
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, clients2.google.com, redirector.gvt1.com, otelrules.svc.static.microsoft, login.live.com, update.googleapis.com, clients1.google.com, fonts.googleapis.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://jainiklifesciences.com/proposals

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.860577243331642
Encrypted:	false
SSDEEP:	3:8Kiun9kagjzQ32BQn:8Kiun2aWzQGBQn
MD5:	F220004BD2C441EC576F73CBEA83D539
SHA1:	127484ECE51FCB705C8FA91681CBE71AFBC06876
SHA-256:	F4014D5129917EE668E2AF3A51054CBF8C6B92DC35741328C643E6CE21B102D3
SHA-512:	5526E094B6DC023E7733B8A77A020BD52BB2D1342DAC93DEB473714E34734F2FB93824403518702DE53F02CDCD201A5B81CCA6FDFCE731D7921A1824A8062AE5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCc85n0-pOk3SEgUN0VtRUhIFDVd69_0hJIbGsPj3lFoSIAltB0-6TwnMXxIFDdFbUVISBQ1Xevf9ISSGxrD495Ra?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgAKEgoHDdFbUVIaAAoHDVd69/0aAA==

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 03:51:18.166181087 CET	53	50305	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:18.279520988 CET	53	62601	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:19.163995981 CET	53	51636	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:19.210395098 CET	64369	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:19.210577011 CET	56987	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:19.313776970 CET	53	63402	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:19.845091105 CET	53	56987	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:19.920718908 CET	53	64369	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:22.425965071 CET	49795	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:22.426119089 CET	50448	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:22.525682926 CET	53	50448	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:22.526727915 CET	53	49795	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:24.754452944 CET	60807	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:24.754652977 CET	50471	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:24.757038116 CET	50078	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:24.757196903 CET	60730	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:24.856245995 CET	53	50471	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:24.856350899 CET	53	56324	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:24.857131958 CET	53	50078	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:24.858382940 CET	53	60730	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:24.893357992 CET	53	60807	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:25.399564028 CET	53	56335	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:25.562602997 CET	60941	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:25.562925100 CET	52238	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:25.654705048 CET	53292	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:25.654975891 CET	53258	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:25.660687923 CET	53	60941	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:25.661165953 CET	53	52238	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:25.753946066 CET	53	53292	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:25.754734039 CET	53	53258	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:26.536097050 CET	58615	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:26.536298037 CET	50565	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:26.637590885 CET	53	50565	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:26.637851954 CET	53	58615	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:27.168284893 CET	60405	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:27.170425892 CET	64483	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:27.266865015 CET	53	64483	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:27.267119884 CET	53	60405	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:30.533154011 CET	53	56611	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:36.258358955 CET	53	61489	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:44.037611961 CET	54915	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:44.037851095 CET	54015	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:44.141973019 CET	53	54015	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:44.180100918 CET	53	54915	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:44.735923052 CET	61856	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:44.736069918 CET	52506	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:51:44.836472034 CET	53	52506	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:44.836894035 CET	53	61856	1.1.1.1	192.168.2.17
Mar 25, 2025 03:51:54.985287905 CET	53	60911	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:17.397963047 CET	53	64673	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:18.107398987 CET	53	61339	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:20.477596998 CET	53	58415	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:20.555799961 CET	53	65236	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:28.164365053 CET	138	138	192.168.2.17	192.168.2.255
Mar 25, 2025 03:52:39.090533018 CET	50853	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:39.090679884 CET	63699	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:39.091267109 CET	59031	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:39.091440916 CET	49276	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:39.196665049 CET	53	50853	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:39.197011948 CET	53	63699	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:39.668370962 CET	57844	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:39.668536901 CET	54179	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:39.682492971 CET	59322	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:39.682645082 CET	56521	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:39.684521914 CET	53	49276	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:39.689778090 CET	53	59031	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:39.766671896 CET	53	57844	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:39.766730070 CET	53	54179	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:39.779961109 CET	53	59322	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:39.782816887 CET	53	56521	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:40.702625990 CET	62145	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:40.702771902 CET	60216	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:40.798998117 CET	53	62145	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:40.800220966 CET	53	60216	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:41.795176029 CET	62179	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:41.795347929 CET	55489	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:41.891949892 CET	53	62179	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:41.893074989 CET	53	55489	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:42.063590050 CET	64932	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:42.063839912 CET	56526	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:42.166187048 CET	53	64932	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:42.175363064 CET	53	56526	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:47.837174892 CET	53	64038	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:53.133177996 CET	55263	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:53.133328915 CET	63471	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:53.239109039 CET	53	55263	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:53.239159107 CET	53	63471	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:54.826395035 CET	53090	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:54.826899052 CET	57838	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:54.926270962 CET	53	53090	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:54.927000046 CET	53	57838	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:56.234899998 CET	64932	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:56.235044956 CET	52204	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:56.279594898 CET	53825	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:56.279740095 CET	61183	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:56.332103014 CET	53	64932	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:56.332746029 CET	53	52204	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:56.378894091 CET	53	53825	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:56.399384022 CET	53	61183	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:56.472608089 CET	53	57345	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:56.558334112 CET	53	64080	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:57.621191978 CET	60492	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:57.621532917 CET	50610	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:52:57.727750063 CET	53	50610	1.1.1.1	192.168.2.17
Mar 25, 2025 03:52:57.730268955 CET	53	60492	1.1.1.1	192.168.2.17
Mar 25, 2025 03:53:17.686239004 CET	57485	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:53:17.686538935 CET	54881	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:53:17.783834934 CET	53	57485	1.1.1.1	192.168.2.17
Mar 25, 2025 03:53:17.809510946 CET	53	54881	1.1.1.1	192.168.2.17
Mar 25, 2025 03:53:18.394650936 CET	64832	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:53:18.394807100 CET	58868	53	192.168.2.17	1.1.1.1
Mar 25, 2025 03:53:18.506675005 CET	53	64832	1.1.1.1	192.168.2.17
Mar 25, 2025 03:53:18.526525974 CET	53	58868	1.1.1.1	192.168.2.17
Mar 25, 2025 03:53:22.464556932 CET	53	64676	1.1.1.1	192.168.2.17

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 25, 2025 03:52:56.399455070 CET	192.168.2.17	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable
Mar 25, 2025 03:53:17.809571028 CET	192.168.2.17	1.1.1.1	c2e7	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:20 UTC	681	OUT	GET /proposals HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:21 UTC	224	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 25 Mar 2025 02:51:21 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 249 Connection: close Location: https://jainiklifesciences.com/proposals/
2025-03-25 02:51:21 UTC	249	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 61 69 6e 69 6b 6c 69 66 65 73 63 69 65 6e 63 65 73 2e 63 6f 6d 2f 70 72 6f 70 6f 73 61 6c 73 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://jainiklifesciences.com/proposals/">here</a>.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:21 UTC	682	OUT	GET /proposals/ HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:21 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:51:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2025-03-25 02:51:21 UTC	4280	IN	Data Raw: 31 30 61 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 42 75 73 69 6e 65 73 73 20 53 6f 6c 75 74 69 6f 6e 73 20 2d 20 53 65 63 75 72 65 20 42 69 64 64 69 6e 67 20 50 72 6f 63 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 10ab<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Business Solutions - Secure Bidding Process</title> <style> body {

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:22 UTC	617	OUT	GET /favicon.ico HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jainiklifesciences.com/proposals/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:23 UTC	186	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 25 Mar 2025 02:51:23 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: close Vary: Accept-Encoding
2025-03-25 02:51:23 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:23 UTC	726	OUT	GET /offers/box.html HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://jainiklifesciences.com/proposals/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:24 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:51:24 GMT Content-Type: text/html Content-Length: 5857 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 24 Mar 2025 14:18:21 GMT Accept-Ranges: bytes
2025-03-25 02:51:24 UTC	5857	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6e 73 74 72 75 63 74 69 6f 6e 20 42 69 64 20 49 6e 76 69 74 61 74 69 6f 6e 20 2d 20 53 65 63 75 72 65 20 41 63 63 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 31 2f 61 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Construction Bid Invitation - Secure Access</title> <script src="https://js.hcaptcha.com/1/a

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:25 UTC	570	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://jainiklifesciences.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:25 UTC	507	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:25 GMT Content-Type: application/javascript Content-Length: 207216 Connection: close CF-Ray: 925b1b3afa7bf5f4-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: max-age=300 ETag: W/"e762c9be8367bcd5190ea932fef0fd3d" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin alt-svc: h3=":443"; ma=86400 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cloudflare
2025-03-25 02:51:25 UTC	862	IN	Data Raw: 2f 2a 20 7b 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 31 22 2c 20 22 68 61 73 68 22 3a 20 22 4d 45 55 43 49 45 62 7a 7a 75 31 4b 4f 2b 30 2b 59 79 78 4c 66 46 4c 74 32 4b 58 67 78 70 6d 42 43 54 4b 4b 62 2f 56 37 50 76 35 6a 68 73 47 53 41 69 45 41 67 57 43 6f 64 56 4b 31 32 55 72 54 70 77 4e 36 70 76 52 58 61 4b 44 48 34 4a 44 31 52 7a 44 51 65 52 34 2f 6b 37 71 6b 74 33 59 3d 22 20 7d 20 2a 2f 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f Data Ascii: /* { "version": "1", "hash": "MEUCIEbzzu1KO+0+YyxLfFLt2KXgxpmBCTKKb/V7Pv5jhsGSAiEAgWCodVK12UrTpwN6pvRXaKDH4JD1RzDQeR4/k7qkt3Y=" } // https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((functio
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 29 29 7d 72 5b 65 5d 3d 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 6e 7d 2c 30 3d 3d 2d 2d 69 26 26 74 28 72 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6f 28 61 2c 72 5b 61 5d 29 7d 29 29 7d 76 61 72 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 Data Ascii: ))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 65 66 65 72 72 65 64 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d Data Ascii: eferreds=null}function h(e,t,n){this.onFulfilled="function"==typeof e?e:null,this.onRejected="function"==typeof t?t:null,this.promise=n}function p(e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 72 6e 28 22 50 6f 73 73 69 62 6c 65 20 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 52 65 6a 65 63 74 69 6f 6e 3a 22 2c 65 29 7d 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 29 72 65 74 75 72 6e 20 73 65 6c 66 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: rn("Possible Unhandled Promise Rejection:",e)};var d=function(){if("undefined"!=typeof self)return self;if("undefined"!=typeof window)return window;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function f
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 54 5b 74 5d 3d 65 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 6b 2c 45 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 28 65 29 7d 7d 2c 78 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 28 65 29 7d 7d 2c 56 3d 22 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 Data Ascii: nction(e){e.labels.forEach((function(t){T[t]=e}))}))}));var k,E={"UTF-8":function(e){return new P(e)}},x={"UTF-8":function(e){return new U(e)}},V="utf-8";function S(e,t){if(!(this instanceof S))throw TypeError("Called as a function. Did you forget 'new'?"
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 6e 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 76 61 72 20 74 3d 65 2e 66 61 74 61 6c 2c 6e 3d 30 2c 72 3d 30 2c 69 3d 30 2c 6f 3d 31 32 38 2c 61 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 76 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 66 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 66 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c Data Ascii: Object.defineProperty\|\|(this.encoding=n._encoding.name.toLowerCase()),n}function U(e){var t=e.fatal,n=0,r=0,i=0,o=128,a=191;this.handler=function(e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return v;if(0===i){if(f(s,0,127))return s;if(f(s,194,223))i=1,
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 78 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 74 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 77 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 76 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d Data Ascii: s._do_not_flush\|\|(this._decoder=x[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(t.stream);for(var r,i=new w(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===v)break;null!=
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 37 33 34 33 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 20 69 66 28 6f 3e 3d 35 35 32 39 36 26 26 6f 3c 3d 35 36 33 31 39 29 69 66 28 72 3d 3d 3d 6e 2d 31 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 72 2b 31 29 3b 69 66 28 61 3e 3d 35 36 33 32 30 26 26 61 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 73 3d 31 30 32 33 26 6f 2c 63 3d 31 30 32 33 26 61 3b 69 2e 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e Data Ascii: 7343)i.push(65533);else if(o>=55296&&o<=56319)if(r===n-1)i.push(65533);else{var a=t.charCodeAt(r+1);if(a>=56320&&a<=57343){var s=1023&o,c=1023&a;i.push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 22 75 6e 77 72 61 70 4b 65 79 22 3a 6c 3d 62 5b 34 5d 2c 75 3d 62 5b 35 5d 2c 68 3d 62 5b 36 5d 2c 62 5b 32 5d 3d 63 2e 5f 6b 65 79 7d 69 66 28 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 6c 2e 68 61 73 68 29 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 6c 2e 6c 65 6e 67 74 68 7c 7c 7b 22 53 48 41 2d 31 22 3a 35 31 32 2c 22 53 48 41 2d 32 35 36 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 Data Ascii: reak;case"unwrapKey":l=b[4],u=b[5],h=b[6],b[2]=c._key}if("generateKey"===e&&"HMAC"===l.name&&l.hash)return l.length=l.length\|\|{"SHA-1":512,"SHA-256":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.lengt
2025-03-25 02:51:25 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 6c 2e 6c 65 6e 67 74 68 7c 7c 28 6c 2e 6c 65 6e 67 74 68 3d 38 2a 65 2e 61 6c 67 6f 72 69 74 68 6d 2e 6c 65 6e 67 74 68 29 29 2c 30 3d 3d 6c 2e 6e 61 6d 65 2e 73 65 61 72 63 68 28 22 52 53 41 22 29 26 26 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 Data Ascii: ction(e){return"HMAC"===l.name&&(l.length\|\|(l.length=8*e.algorithm.length)),0==l.name.search("RSA")&&(l.modulusLength\|\|(l.modulusLength=(e.publicKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:25 UTC	635	OUT	GET /bNn6VR8f/box.jpg HTTP/1.1 Host: i.postimg.cc Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://jainiklifesciences.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:25 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:51:25 GMT Content-Type: image/jpeg Content-Length: 5278 Connection: close Last-Modified: Sun, 23 Mar 2025 04:52:26 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2025-03-25 02:51:25 UTC	3717	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0e 0f 0d 0d 0d 0d 0f 0d 0e 0d 0d 15 11 17 17 15 11 15 15 18 1e 28 22 18 1a 27 1e 15 15 2d 31 21 25 2e 2d 2e 2e 2e 17 20 33 38 35 2c 38 28 2d 2f 2b 01 0a 0a 0a 0e 0d 0e 1a 10 10 17 2d 25 20 20 2b 2e 37 2b 2b 2e 2d 2d 2b 2d 2b 2b 2b 2b 2d 2b 2d 2d 2b 2d 2d 2d 2b 2e 2d 2d 2d 2b 2d 2d 2d 2b 2d 2d 2d 2b 2d 2b 2d 2d 2d 2d 2d 2d 2d 2b 2e 2d 2d 2d ff c0 00 11 08 00 e1 00 e1 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 05 07 06 02 04 03 ff c4 00 45 10 00 02 02 01 01 03 08 05 07 0a 04 07 00 00 00 00 00 01 02 03 11 04 05 06 41 07 12 13 21 22 31 51 61 42 71 81 91 a1 14 23 32 33 62 73 b1 15 24 35 Data Ascii: JFIF("'-1!%.-... 385,8(-/+-% +.7++.--+-++++-+--+---+.---+---+---+-+-------+.---EA!"1QaBq#23bs$5
2025-03-25 02:51:25 UTC	1561	IN	Data Raw: fd f8 fe 04 ff 00 4c dc d3 b9 1f 14 3f 45 d1 fb a7 e0 e8 76 0e e8 e8 f4 0d 4e aa e5 65 cb fd eb 9a 9c d7 ab a9 28 fb 11 0b 23 3e f5 f8 d2 a9 d2 3a 42 55 9c 4b 56 b8 c4 71 eb 2b 9d 4e a2 14 d7 2b 6d 9c 6b ae 09 ca 73 93 c4 62 88 b4 d3 35 cc 53 4c 6b 32 91 55 51 4c 6b 3c 99 75 fc a0 cf f2 9a d4 41 49 e8 62 ba 2e 87 ba 53 a9 be bb 71 fa f9 49 af 25 8e 2c d0 53 b2 e9 fc 3e e4 f7 b9 eb ed e9 e4 a5 ab 68 4f 6d bd 1d de 9f 36 9f a2 d5 d7 a8 ae 17 53 38 d9 5c d6 63 38 bc a7 fd 7c 8a 0a ed d5 45 53 4d 51 a4 c2 e6 8a e9 ae 37 a9 9d 61 57 b7 b7 57 47 b4 3b 57 56 e3 6e 30 ae a9 f3 2c c7 9b ee 97 b5 32 46 3e 6d eb 1c 29 9e 1d 27 93 c6 f6 2d bb dc 6a 8e 3d 5c df f9 5d 46 7f d5 df cd f0 e6 57 9c 7a ff 00 a1 3b d3 37 34 ee 47 c5 13 d1 74 7e e9 f8 3a 5d 83 ba da 4d 9f da Data Ascii: L?EvNe(#>:BUKVq+N+mksb5SLk2UQLk<uAIb.SqI%,S>hOm6S8\c8\|ESMQ7aWWG;WVn0,2F>m)'-j=\]FWz;74Gt~:]M

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:25 UTC	804	OUT	GET /captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://jainiklifesciences.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:26 UTC	572	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; Server: cloudflare CF-RAY: 925b1b3fcfa11b53-EWR
2025-03-25 02:51:26 UTC	797	IN	Data Raw: 37 64 35 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 69 64 3d 22 68 63 61 70 74 63 68 61 2d 66 72 61 6d 65 2d 38 33 34 36 35 39 30 66 34 34 61 39 65 62 39 32 30 31 63 61 61 65 65 63 37 39 61 63 33 30 39 38 36 36 31 37 39 36 64 61 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d Data Ascii: 7d58<!DOCTYPE html><html lang="en" data-id="hcaptcha-frame-8346590f44a9eb9201caaeec79ac3098661796da"><head> <title>hCaptcha</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 32 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 7d 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 72 65 73 69 7a 65 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 73 65 6c 65 63 74 69 Data Ascii: n:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:none}.no-selecti
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 69 66 28 21 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 69 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 6f 3d 69 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 69 66 28 6e 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: if(!t\|\|"undefined"==typeof t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var i=Array.prototype.slice.call(t);if(0===i.length)return e([]);var o=i.length;function r(t,n){if(n&&("object"==t
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 68 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 69 3d 6e 2c 6f 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 63 61 74 63 68 28 72 29 7b 63 28 74 2c 72 29 7d 76 61 72 20 69 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 Data Ascii: instanceof s)return t._state=3,t._value=e,void h(t);if("function"==typeof n)return void f((i=n,o=e,function(){i.apply(o,arguments)}),t)}t._state=1,t._value=e,h(t)}catch(r){c(t,r)}var i,o}function c(t,e){t._state=2,t._value=e,h(t)}function h(t){2===t._sta
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 3d 3d 3d 73 3f 74 3a 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 7d 2c 73 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 73 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 6f 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 72 3b 69 2b 2b 29 73 2e 72 65 73 6f 6c 76 65 28 74 5b 69 5d 29 2e 74 68 Data Ascii: ===s?t:new s((function(e){e(t)}))},s.reject=function(t){return new s((function(e,n){n(t)}))},s.race=function(t){return new s((function(e,n){if(!o(t))return n(new TypeError("Promise.race accepts an array"));for(var i=0,r=t.length;i<r;i++)s.resolve(t[i]).th
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 72 72 61 79 28 74 29 29 66 6f 72 28 76 61 72 20 65 3d 74 3b 65 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 65 2e 73 68 69 66 74 28 29 29 3b 65 6c 73 65 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 74 29 7d 7d 3b 76 61 72 20 76 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 69 66 28 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 63 6f 64 65 72 20 65 72 72 6f 72 22 29 3b 72 65 74 75 72 6e 20 65 7c 7c 36 35 35 33 33 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 53 74 72 69 6e 67 28 74 29 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: rray(t))for(var e=t;e.length;)this.tokens.unshift(e.shift());else this.tokens.unshift(t)}};var v=-1;function w(t,e){if(t)throw TypeError("Decoder error");return e\|\|65533}function x(t){return t=String(t).trim().toLowerCase(),Object.prototype.hasOwnProperty
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 22 29 3b 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 21 31 2c 74 68 69 73 2e 5f 66 61 74 61 6c 3d 65 2e 66 61 74 61 6c 3f 22 66 61 74 61 6c 22 3a 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3b 76 61 72 20 6e 3d 74 68 69 73 3b 69 66 28 65 2e 4e 4f 4e 53 54 41 4e 44 41 52 44 5f 61 6c 6c 6f 77 4c 65 67 61 63 79 45 6e 63 6f 64 69 6e 67 29 7b 76 61 72 20 69 3d 78 28 74 3d 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 74 29 3a 56 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 69 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 69 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e Data Ascii: ");e=y(e),this._encoding=null,this._encoder=null,this._do_not_flush=!1,this._fatal=e.fatal?"fatal":"replacement";var n=this;if(e.NONSTANDARD_allowLegacyEncoding){var i=x(t=t!==undefined?String(t):V);if(null===i\|\|"replacement"===i.name)throw RangeError("Un
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 54 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 61 74 61 6c 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 54 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 67 6e 6f 72 65 42 4f 4d 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 7d 7d 29 29 2c 54 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 6e 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 Data Ascii: t.defineProperty(T.prototype,"fatal",{get:function(){return"fatal"===this._error_mode}}),Object.defineProperty(T.prototype,"ignoreBOM",{get:function(){return this._ignoreBOM}})),T.prototype.decode=function(t,e){var n;n="object"==typeof t&&t instanceof Arr
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 7d 29 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 22 22 3a 53 74 72 69 6e 67 28 74 29 2c 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 45 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 66 61 74 61 6c 7d 29 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c Data Ascii: prototype,"encoding",{get:function(){return this._encoding.name.toLowerCase()}}),S.prototype.encode=function(t,e){t=t===undefined?"":String(t),e=y(e),this._do_not_flush\|\|(this._encoder=E[this._encoding.name]({fatal:"fatal"===this._fatal})),this._do_not_fl
2025-03-25 02:51:26 UTC	1369	IN	Data Raw: 49 68 76 63 4e 41 51 45 42 3a 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 7d 2c 63 3d 7b 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 3a 22 4b 6f 5a 49 68 76 63 4e 41 51 45 42 22 7d 3b 69 66 28 5b 22 67 65 6e 65 72 61 74 65 4b 65 79 22 2c 22 69 6d 70 6f 72 74 4b 65 79 22 2c 22 75 6e 77 72 61 70 4b 65 79 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 6e 5b 74 5d 3b 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 2c 6c 29 7b 76 61 72 20 63 2c 68 2c 75 2c 64 2c 77 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3a 63 3d 79 28 6f 29 2c 68 3d 72 2c 75 3d 6c 3b 62 Data Ascii: IhvcNAQEB:"1.2.840.113549.1.1.1"},c={"1.2.840.113549.1.1.1":"KoZIhvcNAQEB"};if(["generateKey","importKey","unwrapKey"].forEach((function(t){var i=n[t];n[t]=function(o,r,l){var c,h,u,d,w=[].slice.call(arguments);switch(t){case"generateKey":c=y(o),h=r,u=l;b

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:26 UTC	806	OUT	POST /checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain sec-ch-ua-mobile: ?0 Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:27 UTC	587	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:27 GMT Content-Type: application/json Content-Length: 797 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b1b45ff354205-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 02:51:27 UTC	782	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 68 65 6d 65 22 3a 74 72 75 65 2c 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 78 4e 69 77 69 64 43 49 36 49 6e 63 69 4c 43 4a 6b 49 6a 6f 69 63 30 39 72 4d 48 67 7a 65 47 35 6a 56 7a 68 30 5a 47 46 46 5a 47 39 57 62 6b 6c 51 64 7a 4e 53 4b 31 56 5a 62 56 6f 31 57 6e 52 4c 52 31 4a 45 54 57 78 4e 4f 55 56 32 65 6d 39 33 53 6d 39 55 51 57 6c 49 57 6d 52 5a 64 56 56 4a 64 6e 68 76 54 57 63 30 62 33 64 6a 52 31 6c 4a 4f 57 35 46 63 6b 35 68 56 47 56 6b Data Ascii: {"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoxNiwidCI6InciLCJkIjoic09rMHgzeG5jVzh0ZGFFZG9WbklQdzNSK1VZbVo1WnRLR1JETWxNOUV2em93Sm9UQWlIWmRZdVVJdnhvTWc0b3djR1lJOW5Fck5hVGVk
2025-03-25 02:51:27 UTC	15	IN	Data Raw: 22 7d 2c 22 70 61 73 73 22 3a 74 72 75 65 7d Data Ascii: "},"pass":true}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:27 UTC	715	OUT	GET /c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:27 UTC	462	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3024000 etag: W/"7bd876c8f9f3642a65f0c04e462ef689" vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b1b496a184241-EWR
2025-03-25 02:51:27 UTC	907	IN	Data Raw: 37 64 63 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 4b 58 61 4b 59 6d 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 72 3d 66 75 6e 63 74 69 6f 6e 28 64 65 2c 63 47 2c 72 67 2c 74 5a 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 72 3f 28 74 68 69 73 2e 72 65 6d 61 69 6e 64 65 72 3d 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 65 3f 44 77 2e 63 61 6c 6c 28 74 68 69 73 2c 64 65 2c 63 47 29 3a 76 6f 69 64 20 30 3d 3d 3d 63 47 3f 44 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 64 65 29 3a 76 6f 69 64 20 42 77 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 3a 6e 65 77 20 64 72 28 64 65 2c 63 47 2c 72 67 2c 74 5a 29 7d 2c 44 4a 3d 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: 7dc6var hsw=function KXaKYm(){"use strict";var dr=function(de,cG,rg,tZ){return this instanceof dr?(this.remainder=null,"string"==typeof de?Dw.call(this,de,cG):void 0===cG?DJ.call(this,de):void Bw.apply(this,arguments)):new dr(de,cG,rg,tZ)},DJ=function(d
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 2e 75 62 5b 64 77 28 32 33 35 29 5d 7c 7c 28 56 4a 3d 6a 78 28 49 6e 74 33 32 41 72 72 61 79 2c 79 43 2e 75 62 5b 64 77 28 64 72 29 5d 29 29 2c 56 4a 7d 2c 70 5a 3d 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 2c 64 65 29 7b 79 43 2e 4f 62 28 64 72 2c 44 4a 2c 44 76 28 64 65 29 29 7d 3b 76 61 72 20 76 4c 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 66 6f 72 28 44 4a 3d 55 63 2c 64 65 3d 6e 65 77 20 41 72 72 61 79 28 64 72 5b 44 4a 28 33 35 33 29 5d 29 2c 63 47 3d 30 2c 72 67 3d 64 72 5b 44 4a 28 33 35 33 29 5d 2c 76 6f 69 64 20 30 3b 63 47 3c 72 67 3b 63 47 2b 2b 29 7b 76 61 72 20 44 4a 3b 76 61 72 20 64 65 3b 76 61 72 20 63 47 3b 76 61 72 20 72 67 3b 64 65 5b 63 47 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 72 5b 63 47 5d 29 7d 72 65 Data Ascii: .ub[dw(235)]\|\|(VJ=jx(Int32Array,yC.ub[dw(dr)])),VJ},pZ=function(dr,DJ,de){yC.Ob(dr,DJ,Dv(de))};var vL=function(dr){for(DJ=Uc,de=new Array(dr[DJ(353)]),cG=0,rg=dr[DJ(353)],void 0;cG<rg;cG++){var DJ;var de;var cG;var rg;de[cG]=String.fromCharCode(dr[cG])}re
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 58 4c 42 77 76 55 44 65 6a 35 73 77 71 22 2c 22 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 22 2c 22 7a 32 76 30 71 32 39 55 44 67 76 34 44 61 22 2c 22 44 67 39 65 79 78 72 48 76 76 6a 6d 22 2c 22 7a 67 66 30 79 71 22 2c 22 42 33 6a 50 7a 32 4c 55 22 2c 22 43 67 58 31 7a 32 4c 55 43 57 22 2c 22 43 67 58 48 44 67 7a 56 43 4d 30 22 2c 22 44 78 6e 4c 43 4b 66 4e 7a 77 35 30 22 2c 22 42 67 66 55 7a 33 76 48 7a 32 75 22 2c 22 7a 32 76 30 72 77 35 30 43 4d 4c 4c 43 30 6a 35 76 68 4c 57 7a 71 22 2c 22 41 77 35 50 44 67 4c 48 44 67 39 59 76 68 4c 57 7a 71 22 2c 22 79 78 7a 48 41 77 58 78 41 77 72 30 41 61 22 2c 22 79 78 7a 48 41 77 58 69 7a 77 4c 4e 41 68 71 22 2c 22 44 32 4c 4b 44 67 47 22 2c 22 41 67 76 50 7a 32 48 30 22 2c 22 79 32 39 53 42 33 6a 65 7a 78 Data Ascii: XLBwvUDej5swq","AgfZqxr0CMLIDxrL","z2v0q29UDgv4Da","Dg9eyxrHvvjm","zgf0yq","B3jPz2LU","CgX1z2LUCW","CgXHDgzVCM0","DxnLCKfNzw50","BgfUz3vHz2u","z2v0rw50CMLLC0j5vhLWzq","Aw5PDgLHDg9YvhLWzq","yxzHAwXxAwr0Aa","yxzHAwXizwLNAhq","D2LKDgG","AgvPz2H0","y29SB3jezx
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 4a 29 7b 76 61 72 20 64 65 3b 76 61 72 20 63 47 3d 43 4b 3b 76 61 72 20 72 67 3d 64 72 5b 63 47 28 70 63 29 5d 28 44 4a 29 3b 69 66 28 72 67 29 7b 76 61 72 20 74 5a 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 67 29 7c 7c 72 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 33 32 41 72 72 61 79 7c 7c 72 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 33 32 41 72 72 61 79 3b 69 66 28 74 5a 3f 28 47 58 5b 63 47 28 37 34 32 29 5d 5b 63 47 28 38 36 39 29 5d 28 47 58 2c 72 67 29 2c 68 68 5b 63 47 28 44 6b 29 5d 28 64 4a 28 5b 5d 2c 72 67 2c 21 30 29 29 29 3a 28 63 47 28 35 37 39 29 3d 3d 74 79 70 65 6f 66 20 72 67 26 26 47 58 5b 63 47 28 37 34 32 29 5d 28 72 67 29 2c 68 68 5b 63 47 28 37 34 32 29 5d 28 72 67 29 29 2c 21 47 6c 29 72 65 74 75 72 6e 3b 76 Data Ascii: J){var de;var cG=CK;var rg=dr[cG(pc)](DJ);if(rg){var tZ=Array.isArray(rg)\|\|rg instanceof Int32Array\|\|rg instanceof Float32Array;if(tZ?(GX[cG(742)][cG(869)](GX,rg),hh[cG(Dk)](dJ([],rg,!0))):(cG(579)==typeof rg&&GX[cG(742)](rg),hh[cG(742)](rg)),!Gl)return;v
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 3d 3d 64 77 28 32 35 34 29 29 7b 76 61 72 20 44 24 3d 64 72 5b 64 77 28 32 35 35 29 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 44 24 3f 64 77 28 64 65 29 3a 64 77 28 63 47 29 2b 44 24 2b 22 29 22 7d 69 66 28 44 6b 3d 3d 64 77 28 72 67 29 29 7b 76 61 72 20 4c 74 3d 64 72 5b 64 77 28 32 35 39 29 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 4c 74 3d 3d 64 77 28 32 35 33 29 26 26 4c 74 5b 64 77 28 32 34 36 29 5d 3e 30 3f 64 77 28 32 36 30 29 2b 4c 74 2b 22 29 22 3a 64 77 28 32 36 31 29 7d 69 66 28 41 72 72 61 79 5b 64 77 28 74 5a 29 5d 28 64 72 29 29 7b 76 61 72 20 5f 75 3d 64 72 5b 64 77 28 70 5a 29 5d 3b 76 61 72 20 43 55 3d 22 5b 22 3b 5f 75 3e 30 26 26 28 43 55 2b 3d 70 63 28 64 72 5b 30 5d 29 29 3b 66 6f 72 28 76 61 72 20 6c 65 3d 31 3b 6c 65 3c 5f Data Ascii: ==dw(254)){var D$=dr[dw(255)];return null==D$?dw(de):dw(cG)+D$+")"}if(Dk==dw(rg)){var Lt=dr[dw(259)];return typeof Lt==dw(253)&&Lt[dw(246)]>0?dw(260)+Lt+")":dw(261)}if(Array[dw(tZ)](dr)){var _u=dr[dw(pZ)];var CU="[";_u>0&&(CU+=pc(dr[0]));for(var le=1;le<_
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 20 6c 65 28 70 63 29 3b 69 66 28 70 5a 3d 5b 5d 2c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 5b 6c 65 28 44 6b 29 5d 2e 74 6f 53 74 72 69 6e 67 5b 6c 65 28 44 24 29 5d 28 66 67 29 29 7b 66 6f 72 28 74 5a 3d 66 67 5b 6c 65 28 4c 74 29 5d 2c 64 65 3d 30 3b 64 65 3c 74 5a 3b 64 65 2b 3d 31 29 70 5a 5b 64 65 5d 3d 5f 75 28 64 65 2c 66 67 29 7c 7c 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 72 67 3d 30 3d 3d 3d 70 5a 2e 6c 65 6e 67 74 68 3f 22 5b 5d 22 3a 22 5b 22 2b 70 5a 5b 6c 65 28 33 33 30 29 5d 28 22 2c 22 29 2b 22 5d 22 7d 66 6f 72 28 63 47 20 69 6e 20 66 67 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 6c 65 28 36 37 39 29 5d 2e 63 61 6c 6c 28 66 67 2c 63 47 29 26 26 28 72 67 3d 5f 75 28 63 47 Data Ascii: )return le(pc);if(pZ=[],"[object Array]"===Object[le(Dk)].toString[le(D$)](fg)){for(tZ=fg[le(Lt)],de=0;de<tZ;de+=1)pZ[de]=_u(de,fg)\|\|"null";return rg=0===pZ.length?"[]":"["+pZ[le(330)](",")+"]"}for(cG in fg)Object.prototype[le(679)].call(fg,cG)&&(rg=_u(cG
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 31 36 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 31 36 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 36 34 41 72 72 61 79 7d 2c 68 3a 66 67 3d 3d 74 72 75 65 3f 22 5f 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 Data Ascii: y\|\|dr instanceof Uint8Array\|\|dr instanceof Uint8ClampedArray\|\|dr instanceof Int16Array\|\|dr instanceof Uint16Array\|\|dr instanceof Int32Array\|\|dr instanceof Uint32Array\|\|dr instanceof Float32Array\|\|dr instanceof Float64Array},h:fg==true?"_":function(){var d
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 71 65 2c 71 65 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 61 4c 28 38 39 30 29 5d 28 71 65 29 3b 74 72 79 7b 22 6f 70 65 6e 44 61 74 61 62 61 73 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 6f 70 65 6e 44 61 74 61 62 61 73 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 2c 43 59 28 21 31 29 7d 63 61 74 63 68 28 64 72 29 7b 43 59 28 21 30 29 7d 7d 63 61 74 63 68 28 64 72 29 7b 43 59 28 21 30 29 7d 77 69 6e 64 6f 77 5b 61 4c 28 35 36 32 29 5d 5b 61 4c 28 33 32 38 29 5d 28 71 65 2c 31 29 5b 61 4c 28 64 65 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 76 61 72 20 44 4a 3b 76 61 72 20 64 65 3d 61 4c 3b 76 61 72 20 76 4c 3d 6e 75 6c 6c 3d 3d 3d 28 44 4a 3d 64 72 2e 74 61 72 67 65 74 29 7c 7c 76 6f 69 64 Data Ascii: orage.setItem(qe,qe),localStorage[aL(890)](qe);try{"openDatabase"in window&&openDatabase(null,null,null,null),CY(!1)}catch(dr){CY(!0)}}catch(dr){CY(!0)}window[aL(562)][aL(328)](qe,1)[aL(de)]=function(dr){var DJ;var de=aL;var vL=null===(DJ=dr.target)\|\|void
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 44 4a 29 5d 28 29 5b 63 47 28 64 65 29 5d 29 7d 63 61 74 63 68 28 64 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 21 44 6b 3f 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 29 7b 72 65 74 75 72 6e 20 35 37 7c 64 72 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 72 3d 55 63 3b 72 65 74 75 72 6e 20 64 72 28 37 33 37 29 21 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 64 72 28 33 32 32 29 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 5b 64 72 28 38 38 37 29 5d 3f 70 65 72 66 6f 72 6d 61 6e 63 65 5b 64 72 28 38 38 37 29 5d 28 29 3a 44 61 74 65 5b 64 72 28 38 38 37 29 5d 28 29 7d 2c 21 70 7a 3f 66 61 6c 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 29 7b 76 61 72 20 64 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: DJ)]()[cG(de)])}catch(dr){return null}},!Dk?function(dr,DJ){return 57\|dr}:function(){var dr=Uc;return dr(737)!=typeof performance&&dr(322)==typeof performance[dr(887)]?performance[dr(887)]():Date[dr(887)]()},!pz?false:function(dr,DJ){var de;try{return nul
2025-03-25 02:51:27 UTC	1369	IN	Data Raw: 67 29 5d 2c 71 65 5b 76 4c 28 74 5a 29 5d 5d 2c 43 59 26 26 5b 43 59 5b 76 4c 28 33 32 30 29 5d 2c 43 59 2e 72 61 6e 67 65 4d 61 78 2c 43 59 5b 76 4c 28 70 5a 29 5d 5d 2c 61 4c 26 26 5b 61 4c 5b 76 4c 28 33 32 30 29 5d 2c 61 4c 5b 76 4c 28 36 33 37 29 5d 2c 61 4c 5b 76 4c 28 38 32 39 29 5d 5d 2c 43 4c 26 26 5b 43 4c 2e 70 72 65 63 69 73 69 6f 6e 2c 43 4c 2e 72 61 6e 67 65 4d 61 78 2c 43 4c 2e 72 61 6e 67 65 4d 69 6e 5d 5d 7d 2c 47 6e 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 76 61 72 20 44 4a 3d 37 33 32 3b 76 61 72 20 64 65 3d 36 32 30 3b 76 61 72 20 63 47 3d 38 36 36 3b 76 61 72 20 72 67 3d 55 63 3b 72 65 74 75 72 6e 20 50 55 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 50 55 5b 72 67 28 33 34 37 29 5d 28 64 72 29 3f 22 5c 22 22 2b 64 72 5b 72 67 28 34 34 35 Data Ascii: g)],qe[vL(tZ)]],CY&&[CY[vL(320)],CY.rangeMax,CY[vL(pZ)]],aL&&[aL[vL(320)],aL[vL(637)],aL[vL(829)]],CL&&[CL.precision,CL.rangeMax,CL.rangeMin]]},Gn=function(dr){var DJ=732;var de=620;var cG=866;var rg=Uc;return PU.lastIndex=0,PU[rg(347)](dr)?"\""+dr[rg(445

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:27 UTC	529	OUT	GET /checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:51:27 UTC	526	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:27 GMT Content-Type: application/json Content-Length: 797 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b1b49dd94c345-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 02:51:27 UTC	797	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 68 65 6d 65 22 3a 74 72 75 65 2c 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 78 4e 69 77 69 64 43 49 36 49 6e 63 69 4c 43 4a 6b 49 6a 6f 69 64 6c 42 4e 55 6e 46 58 52 47 78 32 54 31 64 58 5a 7a 52 36 61 44 64 34 53 6d 55 31 51 32 35 61 5a 32 78 68 59 6d 56 34 62 6b 6b 35 53 57 31 50 56 46 46 4c 56 7a 6c 6e 4e 30 39 4f 4e 69 74 52 54 6e 42 71 55 32 35 32 53 6d 39 35 52 32 45 79 4d 6e 70 70 52 57 4a 69 55 44 4e 4f 62 6d 78 53 59 54 46 79 63 48 42 72 Data Ascii: {"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoxNiwidCI6InciLCJkIjoidlBNUnFXRGx2T1dXZzR6aDd4SmU1Q25aZ2xhYmV4bkk5SW1PVFFLVzlnN09ONitRTnBqU252Sm95R2EyMnppRWJiUDNObmxSYTFycHBr

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:33 UTC	202	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:33 UTC	472	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:33 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 24 Mar 2025 13:40:53 GMT ETag: "0x8DD6AD97F959539" x-ms-request-id: a4649760-401e-0035-3130-9d82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025133Z-17cccd5449bpx5xthC1EWRqmf40000000cbg00000000cg63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-25 02:51:33 UTC	15912	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a Data Ascii: " /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e Data Ascii: 1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a Data Ascii: > </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f Data Ascii: "Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerso
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f Data Ascii: > </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2025-03-25 02:51:33 UTC	16384	IN	Data Raw: 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 Data Ascii: tus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:34 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: ad95c4cf-201e-0085-1d02-9d34e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025134Z-17cccd5449blprb2hC1EWRvwmn0000000cb000000000cyvk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 02:51:34 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 0d61e029-b01e-0097-6901-9c4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025134Z-17cccd5449bcdqb4hC1EWRt7pn000000023000000000bk3d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 02:51:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:34 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:34 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 21e0a90e-c01e-008e-1b5d-9c7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025134Z-17cccd5449b6sxz8hC1EWRrtxw0000000cg0000000003rk8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 02:51:34 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120600v5s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:34 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:34 GMT Content-Type: text/xml Content-Length: 3870 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 19 Nov 2024 13:00:34 GMT ETag: "0x8DD089A27B58D5A" x-ms-request-id: 719aabfc-b01e-0098-0a06-9ccead000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025134Z-17cccd5449blr9xfhC1EWR6mgs0000000chg000000001hmm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 02:51:34 UTC	3870	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="5" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:34 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 2ab3e7c2-801e-00a3-6f50-9c7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025134Z-17cccd5449bhkn97hC1EWRp7ew0000000ce0000000007p45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 02:51:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:34 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 2713ba85-e01e-0071-7c06-9c08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025134Z-17cccd5449bh49mhhC1EWRu7400000000cdg000000008vtd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: ec18b820-a01e-003d-3e06-9c98d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025134Z-17cccd5449bxd7kxhC1EWRapns0000000cb000000000b7kh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://jainiklifesciences.com/proposals

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Windows Analysis Report
https://jainiklifesciences.com/proposals

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:34 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 8d1c0b8b-801e-0078-135c-9cbac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025134Z-17cccd5449bvj9xqhC1EWRh59s0000000cd0000000009ftn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:34 UTC	199	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 7b90350d-101e-0028-587f-9c8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449bvftlphC1EWRsrrs0000000ce0000000007fst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:35 UTC	199	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f95baf9f-d01e-002b-5e06-9c25fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449b4wvd9hC1EWRkczn0000000cb000000000brpd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:35 UTC	199	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: aeba459a-401e-0067-095c-9c09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449bqnwr7hC1EWRa6600000000cdg0000000080u4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:35 UTC	199	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: afc87390-901e-002a-7206-9c7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449bhkn97hC1EWRp7ew0000000chg00000000212n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:35 UTC	199	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 4e0f7404-401e-0035-7f06-9c82d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449bmhlnhhC1EWRtpfc0000000ccg00000000aamx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:35 UTC	199	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b5904a8e-201e-0033-187f-9cb167000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449b6vb9jhC1EWRfnfg0000000cf0000000005v7g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:35 UTC	199	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 40b0d066-e01e-0085-297f-9cc311000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449bgvc9thC1EWR7dt00000000cb000000000ezev x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:35 UTC	199	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 459b9e05-201e-0096-5406-9cace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449bq6f54hC1EWRb85w0000000ce0000000006pxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-25 02:51:35 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:51:35 UTC	199	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-25 02:51:36 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:51:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 5a788536-801e-0083-1230-9df0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20250325T025135Z-17cccd5449bqvwqkhC1EWR1rfs0000000cgg000000002vc3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2025-03-25 02:51:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />