Edit tour

Windows Analysis Report
https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi~XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJ

Overview

General Information

Sample URL:	https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM
Analysis ID:	1648454
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1944,i,7521306821719447220,7385373534903940505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2156 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1944,i,7521306821719447220,7385373534903940505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3960 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR*~*QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi*~*XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm*~*hJ/*~*js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0*~*j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi*~*f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq*~*TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVYS0X0KYZ7yL4sKD3oGL4Jh912KMW2FDY0tBYEVE315DYZ65XZ4uTZiKXYixi6SOS5VDSZC5WsmSfKG5R53BjL6xfEKwSKuG12SX0KGAZ8W7R5WBSLl812iWf1Kq3r0vTLqHX5/LR50UWZ06TYKNRrcVd*~*FG88JcGJ/FGF88986aFHbKbb/JIIK/89KHGK8IHaG/I8KIcbba6c7cKI68GGKI7?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiMTVjN2QxOWQyYmUwNTY1NzUzNWNiMjU5MjdlZDQxYTo3OjBjYTc6YjUxOGI0N2MzNmJhYjUzNGU2MzNkZWE3MDBkNGExYmIwNzljNzhmMDU2MmNkNzkwZDBhMjM3MDE5NjU0YTZkNTpoOlQ6VA" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "0bL1u",
  "emailcheck": "",
  "webname": "rtrim(/web8/, '/')",
  "urlo": "/qxluSekh8WdNessoWhspUYQ6x7owgvobTYqnEuHn8eHmdhx",
  "gdf": "/ghBaFXznSRZpB4rxWfYzXd4UXITsz2uv7km6cM8j5Lcjab112"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_122	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
2.16.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.8.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.8.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.18..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.18..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.11.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.19..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.19..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.23.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
2.7.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.7.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.12..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.26..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.3.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.6.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.3.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
3.6.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 16 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 3.23.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "0bL1u", "emailcheck": "", "webname": "rtrim(/web8/, '/')", "urlo": "/qxluSekh8WdNessoWhspUYQ6x7owgvobTYqnEuHn8eHmdhx", "gdf": "/ghBaFXznSRZpB4rxWfYzXd4UXITsz2uv7km6cM8j5Lcjab112"}

Phishing

AI detected phishing page

Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'ulrg.wqgcxybxdar.es' does not match the legitimate domain., The URL contains unusual elements and does not resemble any known Microsoft subdomains., The domain extension '.es' is not typically associated with Microsoft., The URL structure and domain name do not align with Microsoft's typical web properties. DOM: 3.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 2.7.d.script.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 2.7.d.script.csv, type: HTML
Source: Yara match	File source: 2.12..script.csv, type: HTML
Source: Yara match	File source: 3.26..script.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_122, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 3.23.d.script.csv, type: HTML
Source: Yara match	File source: 2.16.d.script.csv, type: HTML
Source: Yara match	File source: 2.8.d.script.csv, type: HTML
Source: Yara match	File source: 3.18..script.csv, type: HTML
Source: Yara match	File source: 2.11.d.script.csv, type: HTML
Source: Yara match	File source: 3.19..script.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 2.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ulrg.wqgcxybxdar.es/ecJwVE/$... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be attempting to execute remote code and send sensitive user data to an untrusted domain, which is a clear indication of malicious intent. The overall behavior of this script is highly suspicious and poses a significant security risk.
Source: 2.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ulrg.wqgcxybxdar.es/ecJwVE/$... This script demonstrates high-risk behaviors, including dynamic code execution through the use of a Proxy object that evaluates decoded strings. The obfuscated nature of the code and the potential for remote code execution make this a high-risk script.
Source: 3.18..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhc... This script exhibits several high-risk behaviors, including detecting browser automation tools, blocking keyboard shortcuts, preventing right-click context menus, and intercepting the clipboard. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing security analysis or user interaction. The script also redirects the user to an external website, which could be a phishing or malware distribution site. Overall, this script demonstrates a high level of risk and should be treated with caution.
Source: 2.15..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ulrg.wqgcxybxdar.es/ecJwVE/$... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code and the presence of a debugger-related function suggest malicious intent. Additionally, the script appears to be checking for the presence of web driver or headless browser environments, which is a common technique used by malware to detect and evade analysis. Overall, this script poses a significant security risk and should be treated with caution.

Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN

HTTP Parser: Number of links: 0

Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ulrg.wqgcxybxdar.es/ecJwVE/$

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function hpqVdgzfVw(event) { co...

Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN

HTTP Parser: Title: PaymentConfirmation does not match URL

Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN	HTTP Parser: Invalid link: Terms of use
Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN	HTTP Parser: Invalid link: Privacy & cookies

Source: https://ulrg.wqgcxybxdar.es/ecJwVE/$	HTTP Parser: function mwnntnktuv(){jhcfhwxran = atob("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...
Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "0bl1u";var emailcheck = "";var webname = "rtrim(/web8/, '/')";var urlo = "/qxlusekh8wdnessowhspuyq6x7owgvobtyqneuhn8ehmdhx";var gdf = "/ghbafxznsrzpb4rxwfyzxd4uxitsz2uv7km6cm8j5lcjab112";var odf = "/ijvp4jitedtcpwrbd2o96fiye2gwxbobobzor6wirf43owcd646";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){...

Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN

HTTP Parser: <input type="password" .../> found

Source: https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs&e=o16scqrIeBHXmZGYO8_FQaSfHor19ogR&cee=Y2hyaXN0b3BoZXIuYWxsYW5AcnByby50ZWNo	HTTP Parser: No favicon
Source: https://ulrg.wqgcxybxdar.es/ecJwVE/$	HTTP Parser: No favicon
Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN	HTTP Parser: No favicon

Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN

HTTP Parser: No <meta name="author".. found

Source: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.40.132:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.96:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.96:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.12:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.66:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.12:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.19:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.132.30:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.132.30:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.49:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.73.226:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.40.106:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.254.174:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.254.174:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.150:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.110.180.34:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.110.180.34:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.196.11:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.165:443 -> 192.168.2.5:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.165:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.5:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.5:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.5:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49862 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: protect.checkpoint.com to https://lsems.gravityzone.bitdefender.com/scan/ahr0chm6ly9lbwfpbc5mcmllbmridxktbwfpbc5jb20vbhmvy2xpy2s!dxbupxuwmdeutdatmkzmvfrpvmrpbhhedtrvqkrfqwfzd1q3cdu0nhvudgrzrwjhm05ymg9lsvdbwxjym1hvuxpxs0zschbmyw5vyktoau1mtud6sklpltjcmwfpdenwwu5voxlqetzsmu9tbk94d0pertm2bxvzegv5thz1bexlb2hgmmh1ee9zbi0yqm14svjlq1riafo1uwc2sejtclrdsxvqykm5nxvsauh1awrczlowufrjt1rszmfkuvjic3vwngjtzhc3ym5yunrsy1bmltjcnxniddruq0v2qwjudjloajvst2n0eecxnndmcgduudzgy0jptuh6ce56enzoakprc0ljdde4ahh3bfvxohvzandqz000dkqtmkjtotvsefvvowhlttjar0ppn3zxdldxemzlsde2yjvnb3vmmjltedv6evpiwldrrkhuynewn1u2vwjtmmnwac0yrkrjyjnxvxjrwefxd05ymnnozfn5mdhrwfutmkz4cnd6a1pumndjexpumxhpbvfnltjcdzf1mev5r3njltjcsupenjbmohlkymnxbm5ovwsyzha2vnnhngjju1zscw5ad28xr1b4a0jhqnbibtr3sdlnnhl6oem3meswbflvszv4cm50elheu1hsmxnoqmtxukxyrm9iaveznnqyuhy0ltjgmnvbmu9zzkhzetfpltjgahvsuxr3s3dhavznltjgrdb2ekjoxzrwawhiewdou0iwcjlszlcwzdq0t0r2ltjcuu5ubg81vfbwznjsrutlrlfiewpvwkrzytjzdehnwhcwv3peegdyuuwxvvrnehhlwdhys1hkqtnvsvftu2tgznfyyjbgzec4wxfhrxaytvowtzqzyw0ytu10suzpoudfstdsd1njn0qynux0rnhnafb0m0yweg1sazfrnfpbwxnsvfbvu3r2m0rwngg3wxdrawflymvqoglcs05gm0vpruv1otfimm9q/6ab33e9be5aba334317ac8f885eddf534fcbf3dc7b5d3fd98871929fd13bbfd2?c=1&i=1&docs=1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: email.friendbuy-mail.com to https://591-kadoma.trakcid.com/?u=https:%2f%2femail.idxhome.co%2fc%2fejwcyrfsxcaqancvgzlzw3ytrqcwmiufye-w5chmlejqi3_vjp3lcqplnorvejsj7zcfwlzgkkrsvmbwidcryblifm9sye-e7ryrkmej35ackpmsokzktoxzwceqbpmq7uodnlvhoszxgv9icdg4fo_94z5fd7l-1yun7vq0uki8pd9f_wxzhqx27rztqnpd2vf0aqj60zsbktx-rpwlaad___ocors&e=o16scqriebhxmzgyo8_fqasfhor19ogr&cee=y2hyaxn0b3bozxiuywxsyw5acnbyby50zwno
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: email.idxhome.co to https://ulrg.wqgcxybxdar.es/ecjwve/$

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.59
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.59
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi~XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm~hJ/~js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0~j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi~f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq~TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVYS0X0KYZ7yL4sKD3oGL4Jh912KMW2FDY0tBYEVE315DYZ65XZ4uTZiKXYixi6SOS5VDSZC5WsmSfKG5R53BjL6xfEKwSKuG12SX0KGAZ8W7R5WBSLl812iWf1Kq3r0vTLqHX5/LR50UWZ06TYKNRrcVd~FG88JcGJ/FGF88986aFHbKbb/JIIK/89KHGK8IHaG/I8KIcbba6c7cKI68GGKI7?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiMTVjN2QxOWQyYmUwNTY1NzUzNWNiMjU5MjdlZDQxYTo3OjBjYTc6YjUxOGI0N2MzNmJhYjUzNGU2MzNkZWE3MDBkNGExYmIwNzljNzhmMDU2MmNkNzkwZDBhMjM3MDE5NjU0YTZkNTpoOlQ6VA HTTP/1.1Host: protect.checkpoint.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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?c=1&i=1&docs=1 HTTP/1.1Host: lsems.gravityzone.bitdefender.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.css HTTP/1.1Host: lsems.gravityzone.bitdefender.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!dXBuPXUwMDEuTDAtMkZMVFRPVmRpbHhEdTRvQkRFQWFZd1Q3cDU0NHVUdGRzRWJhM05yMG9LSVdBWXJyM1hVUXpxS0ZScHBmYW5VYktOaU1mTUd6SklPLTJCMWFPdENWWU5VOXlQeTZSMU9Tbk94d0pERTM2bXVzeGV5THZ1bExlb2hGMmh1eE9Zbi0yQm14SVJLQ1RIaFo1UWc2SEJTclRDSXVqYkM5NXVSaUh1aWRCZlowUFRJT1RsZmFkUVJic3VwNGJTZHc3Ym5YUnRsY1BmLTJCNXNidDRUQ0V2QWJudjlOajVsT2N0eEcxNndMcGdUUDZGY0JPTUh6cE56enZoakpRc0lJdDE4aHh3bFVxOHVZandqZ000dkQtMkJtOTVseFVvOWhLTTJaR0pPN3ZXdldxemZlSDE2YjVNb3VMMjlTeDV6eVpIWldRRkhuYnEwN1U2VWJtMmNwaC0yRkRjYjNxVXJRWEFxd05yMnNoZFN5MDhrWFUtMkZ4cnd6a1pUMndjeXpUMXhPbVFnLTJCdzF1MEV5R3NjLTJCSUpENjBMOHlKYmNXbm5oVWsyZHA2VnNhNGJJU1ZScW5ad28xR1B4a0JHQnBIbTR3SDlnNHl6OEM3MEswbFlVSzV4cm50elhEU1hsMXNOQmtxUkxYRm9IaVEzNnQyUHY0LTJGMnVBMU9ZZkhZeTFPLTJGaHVsUXR3S3dHaVZNLTJGRDB2ekJoXzRwaWhIeWdOU0IwcjlSZlcwZDQ0T0R2LTJCUU5ubG81VFBwZnJsRUtlRlFieWpVWkRzYTJzdEhnWHcwV3pEeGdyUUwxVVRNeHhlWDhyS1hKQTNVSVFTU2tGZnFyYjBGZEc4WXFHRXAyTVowTzQzYW0yTU10SUZpOUdFSTdsd1NJN0QyNUx0RnhNaFB0M0YweG1sazFrNFpBWXNSVFBvU3R2M0RwNGg3WXdRaWFlYmVqOGlCS05GM0VPRUV1OTFIMm9Q/6AB33E9BE5ABA334317AC8F885EDDF534FCBF3DC7B5D3FD98871929FD13BBFD2?c=1&i=1&docs=1Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.3dfe9f5e.css HTTP/1.1Host: lsems.gravityzone.bitdefender.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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?c=1&i=1&docs=1Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.d62e4927.js HTTP/1.1Host: lsems.gravityzone.bitdefender.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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?c=1&i=1&docs=1Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lsems.gravityzone.bitdefender.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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?c=1&i=1&docs=1Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: lsems.gravityzone.bitdefender.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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?c=1&i=1&docs=1Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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?i=0&docs=1&s=1 HTTP/1.1Host: api-bd.linkscan.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"X-Original-Referer: unknownsec-ch-ua-mobile: ?0Origin: https://lsems.gravityzone.bitdefender.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://lsems.gravityzone.bitdefender.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lsems.gravityzone.bitdefender.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.L0-2FLTTOVdilxDu4oBDEAaYwT7p544uTtdsEba3Nr0oKIWAYrr3XUQzqKFRppfanUbKNiMfMGzJIO-2B1aOtCVYNU9yPy6R1OSnOxwJDE36musxeyLvulLeohF2huxOYn-2BmxIRKCTHhZ5Qg6HBSrTCIujbC95uRiHuidBfZ0PTIOTlfadQRbsup4bSdw7bnXRtlcPf-2B5sbt4TCEvAbnv9Nj5lOctxG16wLpgTP6FcBOMHzpNzzvhjJQsIIt18hxwlUq8uYjwjgM4vD-2Bm95lxUo9hKM2ZGJO7vWvWqzfeH16b5MouL29Sx5zyZHZWQFHnbq07U6Ubm2cph-2FDcb3qUrQXAqwNr2shdSy08kXU-2FxrwzkZT2wcyzT1xOmQg-2Bw1u0EyGsc-2BIJD60L8yJbcWnnhUk2dp6Vsa4bISVRqnZwo1GPxkBGBpHm4wH9g4yz8C70K0lYUK5xrntzXDSXl1sNBkqRLXFoHiQ36t2Pv4-2F2uA1OYfHYy1O-2FhulQtwKwGiVM-2FD0vzBh_4pihHygNSB0r9RfW0d44ODv-2BQNnlo5TPpfrlEKeFQbyjUZDsa2stHgXw0WzDxgrQL1UTMxxeX8rKXJA3UIQSSkFfqrb0FdG8YqGEp2MZ0O43am2MMtIFi9GEI7lwSI7D25LtFxMhPt3F0xmlk1k4ZAYsRTPoStv3Dp4h7YwQiaebej8iBKNF3EOEEu91H2oP HTTP/1.1Host: email.friendbuy-mail.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://lsems.gravityzone.bitdefender.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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?i=0&docs=1&s=1 HTTP/1.1Host: api-bd.linkscan.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs&e=o16scqrIeBHXmZGYO8_FQaSfHor19ogR&cee=Y2hyaXN0b3BoZXIuYWxsYW5AcnByby50ZWNo HTTP/1.1Host: 591-kadoma.trakcid.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://lsems.gravityzone.bitdefender.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flare.js HTTP/1.1Host: track.salesflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://591-kadoma.trakcid.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /token?email=o16scqrIeBHXmZGYO8_FQaSfHor19ogR HTTP/1.1Host: api.salesflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://591-kadoma.trakcid.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://591-kadoma.trakcid.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /token?email=o16scqrIeBHXmZGYO8_FQaSfHor19ogR HTTP/1.1Host: api.salesflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/@sentry/browser@5.29.2/build/bundle.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://storage.googleapis.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://storage.googleapis.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flareprovider.js HTTP/1.1Host: track.salesflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://storage.googleapis.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 591-kadoma.trakcid.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs&e=o16scqrIeBHXmZGYO8_FQaSfHor19ogR&cee=Y2hyaXN0b3BoZXIuYWxsYW5AcnByby50ZWNoAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /devices HTTP/1.1Host: api.salesflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contacts HTTP/1.1Host: api.salesflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /devices/282098521 HTTP/1.1Host: api.salesflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /interactions/forward?instant=true HTTP/1.1Host: api.salesflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/eJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs HTTP/1.1Host: email.idxhome.coConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://591-kadoma.trakcid.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecJwVE/$ HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://591-kadoma.trakcid.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ulrg.wqgcxybxdar.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/ecJwVE/$Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkxaQjVhWGNxZXc3Wis4RWNtMmFYNlE9PSIsInZhbHVlIjoiNjJ3K0FvbnFNdGJ1ckhKWVg0RXdOZlpaVDNrKzZkWEdyTWQrMCs4bTVrM1U3VVVuQnhqdmNlRXVVSE92UXU3Y3l0THJlcGw1LzkvSkZnMTVOUUFLNDNUOXF5K3cyWm5LUUh3bmdGd0JKazd3UGRkdVg5RFk5UVFxRnBSa1JONk8iLCJtYWMiOiIzNWQ1MDc1NzE4ZGU0OGZlMDliZTVmYzVmZjIyZjlkYzMwNjFiOWVkNjAyYTVkMDhhMzRiODViMDhmYjNkY2E3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEwUVNaTVJ1YUtLQ0NoYlpCRUFEc1E9PSIsInZhbHVlIjoiUFFsTDhJbStTWUtYK3RPR2dBQXdMaXE0NHNNZGJkNWZ6S2RMdFRJamg2WG5zMzVHS20rTVprUWNxd3JrMUZ1UHRiN3IvU2pJRU56amlyWktYVEw4TnpuNktGRDh2M3dGaWdUU1lUTTdrN1ZMY015Wk1aaHNBY1hJcEtnVCtNVFEiLCJtYWMiOiJlMzU2MGY2MDI4YTk3ODA3MjJlMDQ2OWViNDhmOGMzYjYzNWU5YWViNjRkMmRkMTgyZGRmMjlhMTZlOWVlN2VkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /tatay$l4ypz3ij HTTP/1.1Host: kc8wi.ajcffp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://ulrg.wqgcxybxdar.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ulrg.wqgcxybxdar.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tatay$l4ypz3ij HTTP/1.1Host: kc8wi.ajcffp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecJwVE/$ HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ulrg.wqgcxybxdar.es/ecJwVE/$Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVTK1oxSDU2ZlNUM0ZFY1NWYmVFdWc9PSIsInZhbHVlIjoiZ2k4YXFxazB3YXhWUlZaclNyRi9DZUpkYXd2Wnh5eS9Ib3UyYUEwcWpsTXpZK0tuTkhscHlEc0Y5Vkd3ZGQ1RUFueHBRVTl0ejZaRy84NkxadE1aaElON3p3TnlwUFBSZHhKTFlXZlByZFB5NENtQXBPOHJENnlQc1NkcDJ1S0kiLCJtYWMiOiI2Yzk1OTI4YTg1MjQ3OTYzYWVkNDllMmZmODlkMDk2NzUwMTlhN2MyZTY1MmM1YzlhYjg2ZTkxNTIyYTg5ZTU1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1WSU1sZTlpR25jekNoNnk2ZVpCZ2c9PSIsInZhbHVlIjoiV3VWbWFHSjBMc1A1OTFwNXpveXI0VHhuVzRCY0lsNHQrM202MENhR2twNndIV0xLb0VKZ014elJhSGRrNzZqOGRFc0JoQWdpYXBSd28ra1p6dWFFb3A4eEtQV3NDOXBnVFdlanBpTXowWm9zSk9ROE5oVjdJOCtWSXo3UTM2M1UiLCJtYWMiOiJmM2U0MjhkNmIwMTY4ZGRkMmJiYWFmMDJlOWZkZjI5OTVjOWJkOTBkYzVlNDhjZDJkY2U1NmM2MjFmYzA2MzY0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cb1L0BD9rQvQABrRZEEty9MIxucgJcH8tvHXuwHQKfEUvd HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVTK1oxSDU2ZlNUM0ZFY1NWYmVFdWc9PSIsInZhbHVlIjoiZ2k4YXFxazB3YXhWUlZaclNyRi9DZUpkYXd2Wnh5eS9Ib3UyYUEwcWpsTXpZK0tuTkhscHlEc0Y5Vkd3ZGQ1RUFueHBRVTl0ejZaRy84NkxadE1aaElON3p3TnlwUFBSZHhKTFlXZlByZFB5NENtQXBPOHJENnlQc1NkcDJ1S0kiLCJtYWMiOiI2Yzk1OTI4YTg1MjQ3OTYzYWVkNDllMmZmODlkMDk2NzUwMTlhN2MyZTY1MmM1YzlhYjg2ZTkxNTIyYTg5ZTU1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im1WSU1sZTlpR25jekNoNnk2ZVpCZ2c9PSIsInZhbHVlIjoiV3VWbWFHSjBMc1A1OTFwNXpveXI0VHhuVzRCY0lsNHQrM202MENhR2twNndIV0xLb0VKZ014elJhSGRrNzZqOGRFc0JoQWdpYXBSd28ra1p6dWFFb3A4eEtQV3NDOXBnVFdlanBpTXowWm9zSk9ROE5oVjdJOCtWSXo3UTM2M1UiLCJtYWMiOiJmM2U0MjhkNmIwMTY4ZGRkMmJiYWFmMDJlOWZkZjI5OTVjOWJkOTBkYzVlNDhjZDJkY2U1NmM2MjFmYzA2MzY0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ulrg.wqgcxybxdar.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xyerie6jZkbSUVFErOYvIPRRTYlJ8CwqbNxmlwv8AqvJgy HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRHN285K2FxaFQyZVBpSDB3NWcyUHc9PSIsInZhbHVlIjoiYWhWQnI5VHZzQzBVSlkvR1ZsS0d2UFBISFk2bkozcGx2bUwzSTU0NmpLWmpDbzFZbHlZM3kwMERXTHZHb0U4Nk40bGJVUEZ0MU82RG4rbkl3alBMTStWVDFVZHlnRVZJWlBPazdNR1BWZzhLeGFaN2Z2aE12KzN3aE0rbTBIRXAiLCJtYWMiOiI3ZmYwNTE5N2Y2ZTQ4MmU0NDU2NzQ1ZThlNTJlYWJjMDM2ZTcxZDE3MWU3OTAxOTM2NGYyYjIxYWFlZGY5ZjU0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ3dnpyYzh1RmtaTHE3WngvU2ZOdXc9PSIsInZhbHVlIjoiL1BMbGVkM21PcE9ZVmFZSlExY3Jsdno4UWlIdGdmYmlpS2hQVk9ET3d3dXFQQk1HdXdocHZsRWp6QS9LQ3BubWZtOWZEaG5nbkpxU3I2d3hRcll4YXZ4dUNJa1c2TUhEZTlLNzZqVTk3UUlmVzdlNm1wQi9uazdLNnVJQ3ArVVYiLCJtYWMiOiI4NWI3MWNiNjAxOWU5ZDk1NjAyNTU3ZDk1MTVkMjE5MDkyMDI4NmQ1ZGNlYmVjNDEwOTY1Y2YxZDQ5N2NmYWU3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ulrg.wqgcxybxdar.es/ecJwVE/$Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImRHN285K2FxaFQyZVBpSDB3NWcyUHc9PSIsInZhbHVlIjoiYWhWQnI5VHZzQzBVSlkvR1ZsS0d2UFBISFk2bkozcGx2bUwzSTU0NmpLWmpDbzFZbHlZM3kwMERXTHZHb0U4Nk40bGJVUEZ0MU82RG4rbkl3alBMTStWVDFVZHlnRVZJWlBPazdNR1BWZzhLeGFaN2Z2aE12KzN3aE0rbTBIRXAiLCJtYWMiOiI3ZmYwNTE5N2Y2ZTQ4MmU0NDU2NzQ1ZThlNTJlYWJjMDM2ZTcxZDE3MWU3OTAxOTM2NGYyYjIxYWFlZGY5ZjU0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZ3dnpyYzh1RmtaTHE3WngvU2ZOdXc9PSIsInZhbHVlIjoiL1BMbGVkM21PcE9ZVmFZSlExY3Jsdno4UWlIdGdmYmlpS2hQVk9ET3d3dXFQQk1HdXdocHZsRWp6QS9LQ3BubWZtOWZEaG5nbkpxU3I2d3hRcll4YXZ4dUNJa1c2TUhEZTlLNzZqVTk3UUlmVzdlNm1wQi9uazdLNnVJQ3ArVVYiLCJtYWMiOiI4NWI3MWNiNjAxOWU5ZDk1NjAyNTU3ZDk1MTVkMjE5MDkyMDI4NmQ1ZGNlYmVjNDEwOTY1Y2YxZDQ5N2NmYWU3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56KQxv6sWiuC9wcy1cdktv0S8920 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abauJzDKHe41tpqtQXggh24 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveOrigin: https://ulrg.wqgcxybxdar.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveOrigin: https://ulrg.wqgcxybxdar.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveOrigin: https://ulrg.wqgcxybxdar.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveOrigin: https://ulrg.wqgcxybxdar.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ulrg.wqgcxybxdar.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ulrg.wqgcxybxdar.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ulrg.wqgcxybxdar.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ulrg.wqgcxybxdar.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveOrigin: https://ulrg.wqgcxybxdar.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveOrigin: https://ulrg.wqgcxybxdar.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34kMOBYG9V4ttwsGFFoij7T4LNJPUiAA6lxQN89110 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvMLqRSq5VXpOsamTKK4xCck9l1YemqraeyKyAw0Ofw35QLHqW34130 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opZGhivVUwyd3q8fbWEUoYtsBEef77sF2GfzHjPlmZnaoWs145140 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250325%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250325T195550Z&X-Amz-Expires=300&X-Amz-Signature=bd78beccc02606582638dc4b170ff2a4ebc3c4126afbdd104001edea4d267673&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ulrg.wqgcxybxdar.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /efqBgtY0qRtbYCJ22nqTrJaht8ijPFUbPuYjk9p15QdxrK90150 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijqjQL3AvWyICC89OVOs0wxC6r2pBKdR1wd212zRwwE178170 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzrgxk6Um3jF0oP9P97iZX7EevPEVeeSiZ5LKopP090wMUh1r8Oh2xbnQBMR90176 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsFxc7Qza5UTveWgSWnzjoqr7W1N70yahiqBwTkV5FghJhJOOuyMNpttsGzKgRmvIbGcd194 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opZGhivVUwyd3q8fbWEUoYtsBEef77sF2GfzHjPlmZnaoWs145140 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghj9CqQxBJBBGbostvYsX65klXGdZTTgLFIp7jdZr17SA12205 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvMLqRSq5VXpOsamTKK4xCck9l1YemqraeyKyAw0Ofw35QLHqW34130 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijM5gaW4DaXt6LlwpjnU4Qb02GEFenKVxqrQz30RSIBncSFgEcv13mLwHJQTayz230 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijqjQL3AvWyICC89OVOs0wxC6r2pBKdR1wd212zRwwE178170 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klDeUBM9zr4To4xIvYQPBBbKiGl100ATRnijwjpZ42gA8MPUYYZE9qTduGGYeQVswgZh0uv220 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efqBgtY0qRtbYCJ22nqTrJaht8ijPFUbPuYjk9p15QdxrK90150 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzrgxk6Um3jF0oP9P97iZX7EevPEVeeSiZ5LKopP090wMUh1r8Oh2xbnQBMR90176 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrcgnDzKDBRFdkCMcc6Xk83FAGa6TkFQawZTU3OaHuvoO4NUcU8gcNx1CjdUT7trr8uGkefhef240 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsFxc7Qza5UTveWgSWnzjoqr7W1N70yahiqBwTkV5FghJhJOOuyMNpttsGzKgRmvIbGcd194 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvMo5Lcye04zFhfuspt4XXi37jMfoNWZa672yBQ0jcEChE5tqwoW0p7F2rRMg7WirSef260 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDNAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghj9CqQxBJBBGbostvYsX65klXGdZTTgLFIp7jdZr17SA12205 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klDeUBM9zr4To4xIvYQPBBbKiGl100ATRnijwjpZ42gA8MPUYYZE9qTduGGYeQVswgZh0uv220 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijM5gaW4DaXt6LlwpjnU4Qb02GEFenKVxqrQz30RSIBncSFgEcv13mLwHJQTayz230 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlJTVYrQ1NsZzl0UGJiOTBjV1loNGc9PSIsInZhbHVlIjoiY1VlUVdrdkRWUjMrbG5oYStXcDBMbnBJVjlRM2orOUlLNmQ2QXZIdzJTWE90dUVrcjI4UDRyL0RQVVdBTGJ5M3o0b0djNXZnSlN3ZnJvT0xrbUhTN0pUWGhPcVRYMjFOV0FqUzMvTmNwNVNMWHFYYnYvWnRLUjlwR0NrKzB5UlgiLCJtYWMiOiJhMTFhNGZhZDU3ZjU4NTY4MWFiMDYzMDFkNTMxY2IxYTdkMWRjZGNkMzVlNzVmMWMwMDg5OWY1NTgwMDgzZTQxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFKeGVWMXJBRG9nSEVqNzVKd2JOb1E9PSIsInZhbHVlIjoiTmhqMUV2S3FZZE1aQWV3NXZGTzFFWWRDVGhxUXdPNGp4Zm5Dem1qTHY2RU9INEFSTFpoZ1JaMVZHSDZnVUU2eHhLaUJyTWUzUVlGZGNSUkVZOTYrVHBzbERCbGJoaTdkMitaUi9BSWw2elVPQ0xPU2swaVl0V3Q5eUZVRTJsR2UiLCJtYWMiOiIzNTk2ZjQwMmJlOWMxMzU1NzM2YmQ2NjI0YTg3Njg0ZDRkNmZhZTIxMTA5NmVmMTgxMzkxNTc5NDFiZTE4NTFmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qxluSekh8WdNessoWhspUYQ6x7owgvobTYqnEuHn8eHmdhx HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJYUmZha1NrK3Y5cWd0TDRqOFhaU0E9PSIsInZhbHVlIjoiR1p1eWIvUk5iTG9GOUY2WFhvNE5VbW50Mmtsb01QLzl1OW5rbzVRVlcvM0hiZm0zdzlRaUwwL01obERJRkNLeTM0WldlRHZvOHlhRXh3MWt6ZHFKcHpHWkFBbml1UHRHb3pRclhSN3NlMkQveDRndmFxcnJ4YmxZMWR2TTZWUkgiLCJtYWMiOiIxY2MyM2QzOGI1YjE2ZjIxZjIxOTVkMWZhMDcwMThjMDZlMjFmOTJjNjM4YTQxZTY5YWY4MTRmOTNjNTg4MTViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlB1dU95dU9PNE5KVlcrM2ZZbk1jUEE9PSIsInZhbHVlIjoiSGtmMmhPQllIdG9lZnVkM3MxMjNqYXZvNm8xbEk4SjIyUTVrbm1RTE9qY0VMekZxYWdhVEVBSXk5OHp6bFFLMVpQN0U4N3VGdGNVbWNBREVDaG9qOWEyQTVnUkE0dVlHOTdQaXVoMjdCNUNzdHY0YkZFSlNPbFh0Nm9jbjAxUUMiLCJtYWMiOiI1YjYyMWQ3NjQ5NzU4NTZkMDVmZDFjZWY1ZTBjNjdjNWE5OTdmOGUwNTczNDU2ZjQ5Yjk0NmYwZWJkMzNjNDNiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrcgnDzKDBRFdkCMcc6Xk83FAGa6TkFQawZTU3OaHuvoO4NUcU8gcNx1CjdUT7trr8uGkefhef240 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJYUmZha1NrK3Y5cWd0TDRqOFhaU0E9PSIsInZhbHVlIjoiR1p1eWIvUk5iTG9GOUY2WFhvNE5VbW50Mmtsb01QLzl1OW5rbzVRVlcvM0hiZm0zdzlRaUwwL01obERJRkNLeTM0WldlRHZvOHlhRXh3MWt6ZHFKcHpHWkFBbml1UHRHb3pRclhSN3NlMkQveDRndmFxcnJ4YmxZMWR2TTZWUkgiLCJtYWMiOiIxY2MyM2QzOGI1YjE2ZjIxZjIxOTVkMWZhMDcwMThjMDZlMjFmOTJjNjM4YTQxZTY5YWY4MTRmOTNjNTg4MTViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlB1dU95dU9PNE5KVlcrM2ZZbk1jUEE9PSIsInZhbHVlIjoiSGtmMmhPQllIdG9lZnVkM3MxMjNqYXZvNm8xbEk4SjIyUTVrbm1RTE9qY0VMekZxYWdhVEVBSXk5OHp6bFFLMVpQN0U4N3VGdGNVbWNBREVDaG9qOWEyQTVnUkE0dVlHOTdQaXVoMjdCNUNzdHY0YkZFSlNPbFh0Nm9jbjAxUUMiLCJtYWMiOiI1YjYyMWQ3NjQ5NzU4NTZkMDVmZDFjZWY1ZTBjNjdjNWE5OTdmOGUwNTczNDU2ZjQ5Yjk0NmYwZWJkMzNjNDNiIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvMo5Lcye04zFhfuspt4XXi37jMfoNWZa672yBQ0jcEChE5tqwoW0p7F2rRMg7WirSef260 HTTP/1.1Host: ulrg.wqgcxybxdar.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJYUmZha1NrK3Y5cWd0TDRqOFhaU0E9PSIsInZhbHVlIjoiR1p1eWIvUk5iTG9GOUY2WFhvNE5VbW50Mmtsb01QLzl1OW5rbzVRVlcvM0hiZm0zdzlRaUwwL01obERJRkNLeTM0WldlRHZvOHlhRXh3MWt6ZHFKcHpHWkFBbml1UHRHb3pRclhSN3NlMkQveDRndmFxcnJ4YmxZMWR2TTZWUkgiLCJtYWMiOiIxY2MyM2QzOGI1YjE2ZjIxZjIxOTVkMWZhMDcwMThjMDZlMjFmOTJjNjM4YTQxZTY5YWY4MTRmOTNjNTg4MTViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlB1dU95dU9PNE5KVlcrM2ZZbk1jUEE9PSIsInZhbHVlIjoiSGtmMmhPQllIdG9lZnVkM3MxMjNqYXZvNm8xbEk4SjIyUTVrbm1RTE9qY0VMekZxYWdhVEVBSXk5OHp6bFFLMVpQN0U4N3VGdGNVbWNBREVDaG9qOWEyQTVnUkE0dVlHOTdQaXVoMjdCNUNzdHY0YkZFSlNPbFh0Nm9jbjAxUUMiLCJtYWMiOiI1YjYyMWQ3NjQ5NzU4NTZkMDVmZDFjZWY1ZTBjNjdjNWE5OTdmOGUwNTczNDU2ZjQ5Yjk0NmYwZWJkMzNjNDNiIiwidGFnIjoiIn0%3D

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: protect.checkpoint.com
Source: global traffic	DNS traffic detected: DNS query: lsems.gravityzone.bitdefender.com
Source: global traffic	DNS traffic detected: DNS query: api-bd.linkscan.io
Source: global traffic	DNS traffic detected: DNS query: email.friendbuy-mail.com
Source: global traffic	DNS traffic detected: DNS query: 591-kadoma.trakcid.com
Source: global traffic	DNS traffic detected: DNS query: track.salesflare.com
Source: global traffic	DNS traffic detected: DNS query: api.salesflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: email.idxhome.co
Source: global traffic	DNS traffic detected: DNS query: ulrg.wqgcxybxdar.es
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: kc8wi.ajcffp.ru
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Source: unknown

HTTP traffic detected: POST /devices HTTP/1.1Host: api.salesflare.comConnection: keep-aliveContent-Length: 2sec-ch-ua-platform: "Windows"Authorization: Bearer I590yxyke-Z6O0Mj__uwwx61mLbtwXmZFv17wxzP-N77MUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://591-kadoma.trakcid.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://591-kadoma.trakcid.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-guploader-uploadid: AKDAyIvI9sUnPpONqz1yc7h0WPKFgPtklbQoh1Z3WrXFU134Oe3Xb8DxrtQx4aqI8aPPNPMI6R7RKbIexpires: Tue, 25 Mar 2025 20:57:05 GMTdate: Tue, 25 Mar 2025 19:57:05 GMTcache-control: public, max-age=3600last-modified: Mon, 20 Jan 2025 09:27:00 GMTetag: "35b50977890c59dd87536447601ff3d9"x-goog-generation: 1737365220799885x-goog-metageneration: 1x-goog-stored-content-encoding: identityx-goog-stored-content-length: 2016content-type: text/htmlx-goog-hash: crc32c=Xo/u5A==x-goog-hash: md5=NbUJd4kMWd2HU2RHYB/z2Q==x-goog-storage-class: STANDARDaccept-ranges: bytesContent-Length: 2016server: UploadServervia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8vary: originaccess-control-allow-credentials: trueaccess-control-expose-headers: WWW-Authenticate,Server-Authorizationcache-control: no-cachex-cloud-trace-context: 56d610b22c4bb3843c22687b83871a4fdate: Tue, 25 Mar 2025 19:57:06 GMTserver: Google FrontendContent-Length: 60Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8vary: originaccess-control-allow-credentials: trueaccess-control-expose-headers: WWW-Authenticate,Server-Authorizationcache-control: no-cachex-cloud-trace-context: b294339e5e2cd118d4717c633567d42cdate: Tue, 25 Mar 2025 19:57:08 GMTserver: Google FrontendContent-Length: 60Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundcontent-type: application/json; charset=utf-8vary: originaccess-control-allow-credentials: trueaccess-control-expose-headers: WWW-Authenticate,Server-Authorizationcache-control: no-cachex-cloud-trace-context: a2a72d1b8b61d4ce275513fcde0235a8date: Tue, 25 Mar 2025 19:57:09 GMTserver: Google FrontendContent-Length: 60Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:57:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5ol8mqan9TkrplymZhCgqus5Dd0D522XHkkdEsl%2BOir6YUr8UQNCoCldYqdZUZIeTs3ua8qbzCL%2Fbe0jLa8HjyATm5c95%2BRQ3wQXQJkvSrBHMLrau4Edz0yWr4HS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=18749&min_rtt=18745&rtt_var=7038&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2240&delivery_rate=215346&cwnd=252&unsent_bytes=0&cid=bce240938345bea1&ts=308&x=0"Cache-Control: max-age=14400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 9260f9de994043c8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=104076&min_rtt=104011&rtt_var=22042&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1904&delivery_rate=35742&cwnd=247&unsent_bytes=0&cid=35d17ccd757f3cbe&ts=641&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:57:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aesqCqJAgSg%2BRj1yKMx4DFf3iDmp36mOmKQBystXheXYMZvZLx3mDwGTlTfgRAEOc8XsiLKg%2F8rCbPFsNMGczfnR5u4%2BUoO96JUjYCIXMyeKG1gNpYT2IrGHRmik"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=16422&min_rtt=16409&rtt_var=6180&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2060&delivery_rate=244838&cwnd=232&unsent_bytes=0&cid=c3bb1082bce1f929&ts=179&x=0"Server: cloudflareCF-RAY: 9260fa441f598c2d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=101060&min_rtt=100776&rtt_var=21723&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1724&delivery_rate=36527&cwnd=237&unsent_bytes=0&cid=5ffc0af0c2ca6e2d&ts=505&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:57:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6oynSmZty0XSfxN1hJXA65J3w%2B5xjvmcSYt1qEexY7g9JH7yHMJDtI2TsAM4CWe1NYr8ub53BrAVzmR7QS9Xm8y9RJmbC0zg%2FWmrp230%2BkQc9B3OpttlnmqGn8a0"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=18689&min_rtt=18658&rtt_var=7019&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2060&delivery_rate=216743&cwnd=239&unsent_bytes=0&cid=dd66b2698e1198a4&ts=184&x=0"Server: cloudflareCF-RAY: 9260fa4dd820b29e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=105217&min_rtt=103520&rtt_var=23607&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1724&delivery_rate=35976&cwnd=244&unsent_bytes=0&cid=49e909bf82ef9458&ts=513&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 25 Mar 2025 19:57:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c5Bf%2Fog68j0Ay%2FXyw4YO%2BBLwUWqfFVdKqUepGKtE53lSdpPTQL72hFFz2PfbIsKc4yXHNFeT9Vp1nZ%2BWa7wG0g31NHJH3PFAzwmEnDvMGqMDvu2hgCi3JJO%2F4XCT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=19221&min_rtt=19215&rtt_var=7219&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2063&delivery_rate=209870&cwnd=238&unsent_bytes=0&cid=4df732b7abe824a2&ts=192&x=0"Server: cloudflareCF-RAY: 9260fa7289054345-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=104136&min_rtt=104015&rtt_var=22045&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2831&recv_bytes=1725&delivery_rate=35809&cwnd=247&unsent_bytes=0&cid=827d36c8a8b81006&ts=532&x=0"

Source: chromecache_148.2.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_155.2.dr	String found in binary or memory: https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIU
Source: chromecache_156.2.dr	String found in binary or memory: https://app.salesflare.com/#/signup/?campaign=
Source: chromecache_156.2.dr	String found in binary or memory: https://app.salesflare.com/#/signup/?campaign=-trackinglinks-landingpage
Source: chromecache_187.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/
Source: chromecache_155.2.dr	String found in binary or memory: https://email.friendbuy-mail.com/ls/click?upn=u001.L0-2FLTTOVdilxDu4oBDEAaYwT7p544uTtdsEba3Nr0oKIWAY
Source: chromecache_125.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:100
Source: chromecache_156.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:400
Source: chromecache_125.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Raleway:400
Source: chromecache_125.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:100
Source: chromecache_182.2.dr, chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_182.2.dr, chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_182.2.dr, chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_182.2.dr, chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_182.2.dr, chromecache_141.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_124.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyC0ITw.woff2)
Source: chromecache_124.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCAIT5lu.woff2)
Source: chromecache_124.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCIIT5lu.woff2)
Source: chromecache_124.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCMIT5lu.woff2)
Source: chromecache_124.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/raleway/v34/1Ptug8zYS_SKggPNyCkIT5lu.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_177.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_148.2.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_170.2.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_156.2.dr	String found in binary or memory: https://github.com/sindresorhus/prepend-http/blob/040579fb1271df6232dd96a7600c9efb1510eb47/index.js
Source: chromecache_159.2.dr	String found in binary or memory: https://storage.googleapis.com/track.salesflare.com/actual_flare.js
Source: chromecache_155.2.dr	String found in binary or memory: https://storage.googleapis.com/track.salesflare.com/provider.html?xdm_e=https%3A%2F%2F591-kadoma.tra
Source: chromecache_156.2.dr	String found in binary or memory: https://track.salesflare.com/flare.js
Source: chromecache_187.2.dr	String found in binary or memory: https://track.salesflare.com/flareprovider.js
Source: chromecache_152.2.dr	String found in binary or memory: https://www.flipkart.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.40.132:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.96:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.168.102.96:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.12:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.66:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.12:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.19:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.132.30:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.173.132.30:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.249.91.49:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.149.73.226:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.40.106:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.254.174:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.186.254.174:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.229:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.43.150:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.110.180.34:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.110.180.34:443 -> 192.168.2.5:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.196.11:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.165:443 -> 192.168.2.5:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.165:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49816 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.5:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.5:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.5:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.5:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49862 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6276_2086522078

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6276_2086522078

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.win@29/126@61/24

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1944,i,7521306821719447220,7385373534903940505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2156 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1944,i,7521306821719447220,7385373534903940505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3960 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi~XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm~hJ/~js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0~j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi~f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq~TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVYS0X0KYZ7yL4sKD3oGL4Jh912KMW2FDY0tBYEVE315DYZ65XZ4uTZiKXYixi6SOS5VDSZC5WsmSfKG5R53BjL6xfEKwSKuG12SX0KGAZ8W7R5WBSLl812iWf1Kq3r0vTLqHX5/LR50UWZ06TYKNRrcVd~FG88JcGJ/FGF88986aFHbKbb/JIIK/89KHGK8IHaG/I8KIcbba6c7cKI68GGKI7?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiMTVjN2QxOWQyYmUwNTY1NzUzNWNiMjU5MjdlZDQxYTo3OjBjYTc6YjUxOGI0N2MzNmJhYjUzNGU2MzNkZWE3MDBkNGExYmIwNzljNzhmMDU2MmNkNzkwZDBhMjM3MDE5NjU0YTZkNTpoOlQ6VA"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1944,i,7521306821719447220,7385373534903940505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2156 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1944,i,7521306821719447220,7385373534903940505,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3960 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.8.d.script.csv, type: HTML
Source: Yara match	File source: 3.18..script.csv, type: HTML
Source: Yara match	File source: 3.19..script.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi~XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm~hJ/~js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0~j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi~f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq~TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVYS0X0KYZ7yL4sKD3oGL4Jh912KMW2FDY0tBYEVE315DYZ65XZ4uTZiKXYixi6SOS5VDSZC5WsmSfKG5R53BjL6xfEKwSKuG12SX0KGAZ8W7R5WBSLl812iWf1Kq3r0vTLqHX5/LR50UWZ06TYKNRrcVd~FG88JcGJ/FGF88986aFHbKbb/JIIK/89KHGK8IHaG/I8KIcbba6c7cKI68GGKI7?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiMTVjN2QxOWQyYmUwNTY1NzUzNWNiMjU5MjdlZDQxYTo3OjBjYTc6YjUxOGI0N2MzNmJhYjUzNGU2MzNkZWE3MDBkNGExYmIwNzljNzhmMDU2MmNkNzkwZDBhMjM3MDE5NjU0YTZkNTpoOlQ6VA	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://ulrg.wqgcxybxdar.es/cb1L0BD9rQvQABrRZEEty9MIxucgJcH8tvHXuwHQKfEUvd	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/abauJzDKHe41tpqtQXggh24	0%	Avira URL Cloud	safe
https://app.salesflare.com/#/signup/?campaign=	0%	Avira URL Cloud	safe
https://email.friendbuy-mail.com/ls/click?upn=u001.L0-2FLTTOVdilxDu4oBDEAaYwT7p544uTtdsEba3Nr0oKIWAY	0%	Avira URL Cloud	safe
https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIU	0%	Avira URL Cloud	safe
https://kc8wi.ajcffp.ru/tatay$l4ypz3ij	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/ijqjQL3AvWyICC89OVOs0wxC6r2pBKdR1wd212zRwwE178170	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/qxluSekh8WdNessoWhspUYQ6x7owgvobTYqnEuHn8eHmdhx	0%	Avira URL Cloud	safe
https://track.salesflare.com/flareprovider.js	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/xyerie6jZkbSUVFErOYvIPRRTYlJ8CwqbNxmlwv8AqvJgy	0%	Avira URL Cloud	safe
https://track.salesflare.com/flare.js	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/ijM5gaW4DaXt6LlwpjnU4Qb02GEFenKVxqrQz30RSIBncSFgEcv13mLwHJQTayz230	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/34kMOBYG9V4ttwsGFFoij7T4LNJPUiAA6lxQN89110	0%	Avira URL Cloud	safe
https://lsems.gravityzone.bitdefender.com/index.css	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/klDeUBM9zr4To4xIvYQPBBbKiGl100ATRnijwjpZ42gA8MPUYYZE9qTduGGYeQVswgZh0uv220	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/efqBgtY0qRtbYCJ22nqTrJaht8ijPFUbPuYjk9p15QdxrK90150	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://email.idxhome.co/c/eJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs	0%	Avira URL Cloud	safe
https://app.salesflare.com/#/signup/?campaign=-trackinglinks-landingpage	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/rsFxc7Qza5UTveWgSWnzjoqr7W1N70yahiqBwTkV5FghJhJOOuyMNpttsGzKgRmvIbGcd194	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/uvMo5Lcye04zFhfuspt4XXi37jMfoNWZa672yBQ0jcEChE5tqwoW0p7F2rRMg7WirSef260	0%	Avira URL Cloud	safe
https://email.friendbuy-mail.com/ls/click?upn=u001.L0-2FLTTOVdilxDu4oBDEAaYwT7p544uTtdsEba3Nr0oKIWAYrr3XUQzqKFRppfanUbKNiMfMGzJIO-2B1aOtCVYNU9yPy6R1OSnOxwJDE36musxeyLvulLeohF2huxOYn-2BmxIRKCTHhZ5Qg6HBSrTCIujbC95uRiHuidBfZ0PTIOTlfadQRbsup4bSdw7bnXRtlcPf-2B5sbt4TCEvAbnv9Nj5lOctxG16wLpgTP6FcBOMHzpNzzvhjJQsIIt18hxwlUq8uYjwjgM4vD-2Bm95lxUo9hKM2ZGJO7vWvWqzfeH16b5MouL29Sx5zyZHZWQFHnbq07U6Ubm2cph-2FDcb3qUrQXAqwNr2shdSy08kXU-2FxrwzkZT2wcyzT1xOmQg-2Bw1u0EyGsc-2BIJD60L8yJbcWnnhUk2dp6Vsa4bISVRqnZwo1GPxkBGBpHm4wH9g4yz8C70K0lYUK5xrntzXDSXl1sNBkqRLXFoHiQ36t2Pv4-2F2uA1OYfHYy1O-2FhulQtwKwGiVM-2FD0vzBh_4pihHygNSB0r9RfW0d44ODv-2BQNnlo5TPpfrlEKeFQbyjUZDsa2stHgXw0WzDxgrQL1UTMxxeX8rKXJA3UIQSSkFfqrb0FdG8YqGEp2MZ0O43am2MMtIFi9GEI7lwSI7D25LtFxMhPt3F0xmlk1k4ZAYsRTPoStv3Dp4h7YwQiaebej8iBKNF3EOEEu91H2oP	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/opZGhivVUwyd3q8fbWEUoYtsBEef77sF2GfzHjPlmZnaoWs145140	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/yzrgxk6Um3jF0oP9P97iZX7EevPEVeeSiZ5LKopP090wMUh1r8Oh2xbnQBMR90176	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/ghj9CqQxBJBBGbostvYsX65klXGdZTTgLFIp7jdZr17SA12205	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://lsems.gravityzone.bitdefender.com/manifest.json	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/56KQxv6sWiuC9wcy1cdktv0S8920	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/qrcgnDzKDBRFdkCMcc6Xk83FAGa6TkFQawZTU3OaHuvoO4NUcU8gcNx1CjdUT7trr8uGkefhef240	0%	Avira URL Cloud	safe
https://lsems.gravityzone.bitdefender.com/static/css/main.3dfe9f5e.css	0%	Avira URL Cloud	safe
https://lsems.gravityzone.bitdefender.com/static/js/main.d62e4927.js	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/favicon.ico	0%	Avira URL Cloud	safe
https://591-kadoma.trakcid.com/favicon.ico	0%	Avira URL Cloud	safe
https://ulrg.wqgcxybxdar.es/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://lsems.gravityzone.bitdefender.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
api-bd.linkscan.io	13.249.91.66	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
d3rb3qlp6ej74d.cloudfront.net	13.249.91.12	true	false	unknown
github.com	140.82.113.3	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.113.94	true	false	high
ulrg.wqgcxybxdar.es	104.21.112.1	true	true	unknown
d2srg6h49ykvtq.cloudfront.net	3.168.102.96	true	false	unknown
mailgun.org	34.110.180.34	true	false	high
code.jquery.com	151.101.2.137	true	false	high
kc8wi.ajcffp.ru	172.67.196.11	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
d1b13yb8esv0x1.cloudfront.net	18.173.132.30	true	false	unknown
track.salesflare.com	172.66.40.106	true	false	high
www.google.com	142.251.40.132	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.110	true	false	high
objects.githubusercontent.com	185.199.111.133	true	false	high
591-kadoma.trakcid.com	34.149.73.226	true	false	unknown
api.salesflare.com	35.186.254.174	true	false	high
email.friendbuy-mail.com	unknown	unknown	false	high
email.idxhome.co	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
lsems.gravityzone.bitdefender.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
protect.checkpoint.com	unknown	unknown	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://ulrg.wqgcxybxdar.es/cb1L0BD9rQvQABrRZEEty9MIxucgJcH8tvHXuwHQKfEUvd	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://ulrg.wqgcxybxdar.es/qxluSekh8WdNessoWhspUYQ6x7owgvobTYqnEuHn8eHmdhx	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/ijqjQL3AvWyICC89OVOs0wxC6r2pBKdR1wd212zRwwE178170	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://track.salesflare.com/flareprovider.js	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/abauJzDKHe41tpqtQXggh24	false	Avira URL Cloud: safe	unknown
https://api.salesflare.com/devices/282098521	false		high
https://kc8wi.ajcffp.ru/tatay$l4ypz3ij	false	Avira URL Cloud: safe	unknown
https://track.salesflare.com/flare.js	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://lsems.gravityzone.bitdefender.com/index.css	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=rjgqcOsVx9lLPS70jU%2Bau4cFgf7q5y8gCT96oHXn3KfF6%2BbMNLz2rRZCVMarSRUJVmndY2wQnnzGKIIFqpfPmGJgzZJe1GyKuIyvN2YRg2PhYL2zvf89Ft1nSsDF	false		high
https://a.nel.cloudflare.com/report/v4?s=5ol8mqan9TkrplymZhCgqus5Dd0D522XHkkdEsl%2BOir6YUr8UQNCoCldYqdZUZIeTs3ua8qbzCL%2Fbe0jLa8HjyATm5c95%2BRQ3wQXQJkvSrBHMLrau4Edz0yWr4HS	false		high
https://ulrg.wqgcxybxdar.es/34kMOBYG9V4ttwsGFFoij7T4LNJPUiAA6lxQN89110	false	Avira URL Cloud: safe	unknown
https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs&e=o16scqrIeBHXmZGYO8_FQaSfHor19ogR&cee=Y2hyaXN0b3BoZXIuYWxsYW5AcnByby50ZWNo	false		unknown
https://ulrg.wqgcxybxdar.es/ijM5gaW4DaXt6LlwpjnU4Qb02GEFenKVxqrQz30RSIBncSFgEcv13mLwHJQTayz230	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/xyerie6jZkbSUVFErOYvIPRRTYlJ8CwqbNxmlwv8AqvJgy	false	Avira URL Cloud: safe	unknown
https://email.idxhome.co/c/eJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs	false	Avira URL Cloud: safe	unknown
https://api.salesflare.com/contacts	false		high
https://a.nel.cloudflare.com/report/v4?s=ZXBRP0T1k5Tn5PmpCeqxhAYb1ryHYsVgCVSBiWpiTkesH9HId5iT3HzjDzF03XKp3HqIPgn%2BzPo08p64N2X%2FzC9dzn0it3zdsQ1j2Mpn4m4ACld5AHNXokDCdo2z	false		high
https://ulrg.wqgcxybxdar.es/efqBgtY0qRtbYCJ22nqTrJaht8ijPFUbPuYjk9p15QdxrK90150	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/klDeUBM9zr4To4xIvYQPBBbKiGl100ATRnijwjpZ42gA8MPUYYZE9qTduGGYeQVswgZh0uv220	false	Avira URL Cloud: safe	unknown
https://api.salesflare.com/token?email=o16scqrIeBHXmZGYO8_FQaSfHor19ogR	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://ulrg.wqgcxybxdar.es/rsFxc7Qza5UTveWgSWnzjoqr7W1N70yahiqBwTkV5FghJhJOOuyMNpttsGzKgRmvIbGcd194	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/uvMo5Lcye04zFhfuspt4XXi37jMfoNWZa672yBQ0jcEChE5tqwoW0p7F2rRMg7WirSef260	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://ulrg.wqgcxybxdar.es/yzrgxk6Um3jF0oP9P97iZX7EevPEVeeSiZ5LKopP090wMUh1r8Oh2xbnQBMR90176	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/opZGhivVUwyd3q8fbWEUoYtsBEef77sF2GfzHjPlmZnaoWs145140	false	Avira URL Cloud: safe	unknown
https://api.salesflare.com/interactions/forward?instant=true	false		high
https://email.friendbuy-mail.com/ls/click?upn=u001.L0-2FLTTOVdilxDu4oBDEAaYwT7p544uTtdsEba3Nr0oKIWAYrr3XUQzqKFRppfanUbKNiMfMGzJIO-2B1aOtCVYNU9yPy6R1OSnOxwJDE36musxeyLvulLeohF2huxOYn-2BmxIRKCTHhZ5Qg6HBSrTCIujbC95uRiHuidBfZ0PTIOTlfadQRbsup4bSdw7bnXRtlcPf-2B5sbt4TCEvAbnv9Nj5lOctxG16wLpgTP6FcBOMHzpNzzvhjJQsIIt18hxwlUq8uYjwjgM4vD-2Bm95lxUo9hKM2ZGJO7vWvWqzfeH16b5MouL29Sx5zyZHZWQFHnbq07U6Ubm2cph-2FDcb3qUrQXAqwNr2shdSy08kXU-2FxrwzkZT2wcyzT1xOmQg-2Bw1u0EyGsc-2BIJD60L8yJbcWnnhUk2dp6Vsa4bISVRqnZwo1GPxkBGBpHm4wH9g4yz8C70K0lYUK5xrntzXDSXl1sNBkqRLXFoHiQ36t2Pv4-2F2uA1OYfHYy1O-2FhulQtwKwGiVM-2FD0vzBh_4pihHygNSB0r9RfW0d44ODv-2BQNnlo5TPpfrlEKeFQbyjUZDsa2stHgXw0WzDxgrQL1UTMxxeX8rKXJA3UIQSSkFfqrb0FdG8YqGEp2MZ0O43am2MMtIFi9GEI7lwSI7D25LtFxMhPt3F0xmlk1k4ZAYsRTPoStv3Dp4h7YwQiaebej8iBKNF3EOEEu91H2oP	false	Avira URL Cloud: safe	unknown
https://api.salesflare.com/devices	false		high
https://ulrg.wqgcxybxdar.es/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/@sentry/browser@5.29.2/build/bundle.min.js	false		high
https://ulrg.wqgcxybxdar.es/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/ghj9CqQxBJBBGbostvYsX65klXGdZTTgLFIp7jdZr17SA12205	false	Avira URL Cloud: safe	unknown
https://lsems.gravityzone.bitdefender.com/manifest.json	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/56KQxv6sWiuC9wcy1cdktv0S8920	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/qrcgnDzKDBRFdkCMcc6Xk83FAGa6TkFQawZTU3OaHuvoO4NUcU8gcNx1CjdUT7trr8uGkefhef240	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/ecJwVE/$	true		unknown
https://lsems.gravityzone.bitdefender.com/static/css/main.3dfe9f5e.css	false	Avira URL Cloud: safe	unknown
https://591-kadoma.trakcid.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://lsems.gravityzone.bitdefender.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ulrg.wqgcxybxdar.es/gnxrnfqgxtyicwormeyuhclzykI43SBTNM1I224D8M?ISXTQKJMPADIXDN	true		unknown
https://lsems.gravityzone.bitdefender.com/static/js/main.d62e4927.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIU	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/	chromecache_187.2.dr	false		high
https://app.salesflare.com/#/signup/?campaign=	chromecache_156.2.dr	false	Avira URL Cloud: safe	unknown
https://email.friendbuy-mail.com/ls/click?upn=u001.L0-2FLTTOVdilxDu4oBDEAaYwT7p544uTtdsEba3Nr0oKIWAY	chromecache_155.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/fent)	chromecache_148.2.dr	false		high
https://github.com/sindresorhus/prepend-http/blob/040579fb1271df6232dd96a7600c9efb1510eb47/index.js	chromecache_156.2.dr	false		high
https://app.salesflare.com/#/signup/?campaign=-trackinglinks-landingpage	chromecache_156.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/getsentry/sentry-javascript	chromecache_170.2.dr	false		high
https://www.flipkart.com	chromecache_152.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.249.91.49	unknown	United States	16509	AMAZON-02US	false
34.110.180.34	mailgun.org	United States	15169	GOOGLEUS	false
140.82.113.3	github.com	United States	36459	GITHUBUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
13.249.91.66	api-bd.linkscan.io	United States	16509	AMAZON-02US	false
104.21.92.165	unknown	United States	13335	CLOUDFLARENETUS	false
172.66.40.106	track.salesflare.com	United States	13335	CLOUDFLARENETUS	false
185.199.111.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
172.67.196.11	kc8wi.ajcffp.ru	United States	13335	CLOUDFLARENETUS	false
142.251.40.132	www.google.com	United States	15169	GOOGLEUS	false
104.21.112.1	ulrg.wqgcxybxdar.es	United States	13335	CLOUDFLARENETUS	true
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
3.168.102.96	d2srg6h49ykvtq.cloudfront.net	United States	16509	AMAZON-02US	false
172.66.43.150	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	unknown	United States	3	MIT-GATEWAYSUS	false
13.249.91.19	unknown	United States	16509	AMAZON-02US	false
18.173.132.30	d1b13yb8esv0x1.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
13.249.91.12	d3rb3qlp6ej74d.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
18.164.124.110	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
34.149.73.226	591-kadoma.trakcid.com	United States	2686	ATGS-MMD-ASUS	false
35.186.254.174	api.salesflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1648454
Start date and time:	2025-03-25 20:55:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi~XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm~hJ/~js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0~j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi~f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq~TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVYS0X0KYZ7yL4sKD3oGL4Jh912KMW2FDY0tBYEVE315DYZ65XZ4uTZiKXYixi6SOS5VDSZC5WsmSfKG5R53BjL6xfEKwSKuG12SX0KGAZ8W7R5WBSLl812iWf1Kq3r0vTLqHX5/LR50UWZ06TYKNRrcVd~FG88JcGJ/FGF88986aFHbKbb/JIIK/89KHGK8IHaG/I8KIcbba6c7cKI68GGKI7?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiMTVjN2QxOWQyYmUwNTY1NzUzNWNiMjU5MjdlZDQxYTo3OjBjYTc6YjUxOGI0N2MzNmJhYjUzNGU2MzNkZWE3MDBkNGExYmIwNzljNzhmMDU2MmNkNzkwZDBhMjM3MDE5NjU0YTZkNTpoOlQ6VA
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.evad.win@29/126@61/24

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.110, 142.251.40.206, 142.251.179.84, 142.251.40.195, 172.217.165.142, 142.250.176.206, 142.250.65.206, 142.251.41.10, 142.250.80.67, 199.232.210.172, 142.251.40.202, 142.251.40.155, 172.217.165.155, 142.251.40.187, 142.250.65.219, 142.251.40.219, 142.251.41.27, 142.250.81.251, 142.251.35.187, 142.250.80.123, 142.250.65.251, 142.250.80.91, 142.250.176.219, 142.250.65.187, 142.251.32.123, 142.251.40.251, 142.251.40.123, 142.250.64.123, 142.250.72.123, 142.251.35.174, 142.250.80.46, 142.250.64.99, 142.251.41.3, 142.251.32.99, 142.251.40.238, 142.250.80.110, 142.251.40.106, 142.251.32.106, 142.250.64.74, 142.250.65.202, 142.251.40.138, 142.250.81.234, 142.250.65.170, 142.251.35.170, 142.251.40.234, 142.251.40.170, 142.250.65.234, 172.217.165.138, 142.250.72.106, 142.250.64.106, 142.250.80.99, 34.104.35.123, 142.250.81.238, 142.250.72.99, 142.250.65.174, 20.12.23.50, 20.75.60.91, 150.171.27.10
Excluded domains from analysis (whitelisted): fonts.googleapis.com, accounts.google.com, storage.googleapis.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR*~*QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi*~*XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm*~*hJ/*~*js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0*~*j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi*~*f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq*~*TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVY

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	35786
Entropy (8bit):	5.058073854893359
Encrypted:	false
SSDEEP:	192:hToogIexLQ5WKTCFBwCIZtJ8FtX2+UBRkf1WcrScuH9Ye3YdersR8Q5oqWjfuogF:h0DKAaZtJsOodwuhx5P6mqjDggJkLRn
MD5:	38501E3FBBBD89B56AA5BA35DE1A32FE
SHA1:	D9B31981B6F834E8480BA28FBC1CFF1BE772F589
SHA-256:	A1CA6B381CB01968851C98512C6E7F6C5309A49F7A16B864813135CBFF82A85B
SHA-512:	1547937AA9B366E76DE44933EF48EF60E3D043245E8E3E01C97DFC2981F6B1F61463D9D30992FBCF2CA25FC1B7B32FF808B9789CFB965D74455522FC58E0C08C
Malicious:	false
Reputation:	low
URL:	https://ulrg.wqgcxybxdar.es/abauJzDKHe41tpqtQXggh24
Preview:	#sections_godaddy {..font-family: gdsherpa !important;..}..#sections_godaddy a {.. color: var(--ux-2rqapw,#000);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. text-decoration: var(--ux-1f7if5p,underline);.. background-color: transparent;..}....#sections_godaddy #root {.. flex: 1 1 0%;..}....#sections_godaddy a:hover {../* color: var(--ux-1j87vvn,#fff);/.. -webkit-text-decoration: var(--ux-1ft0khm,underline);.. text-decoration: var(--ux-1ft0khm,underline);..}....#sections_godaddy svg {.. overflow: hidden;.. vertical-align: unset;..}....#sections_godaddy .ux-button {.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) 1em - 1.5em) / 2);.. padding: 0;.. text-decoration: var(--ux-1f7if5p,underline);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. gap: 0.5em;.. cursor: pointer;.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);.. font-weight: inherit;.. background: transparent;.. gap:

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 20:56:49.807321072 CET	53	52335	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:49.868906975 CET	53	60493	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:50.134706020 CET	53	49472	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:50.840142965 CET	53	57048	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:50.878273964 CET	53	59732	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:53.941728115 CET	50349	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:53.941957951 CET	58714	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:54.048468113 CET	53	50349	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:54.049087048 CET	53	58714	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:55.041028976 CET	64366	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:55.041296959 CET	55156	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:55.146625996 CET	53	64366	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:55.177027941 CET	53	55156	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:55.951344013 CET	65212	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:55.951561928 CET	53312	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:56.094136000 CET	53	53312	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:56.099345922 CET	53	65212	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:56.657845974 CET	53	56775	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:57.793061972 CET	51801	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:57.793524981 CET	60548	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:57.956085920 CET	53	60548	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:57.957777023 CET	53	51801	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:58.629462957 CET	54598	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:58.629726887 CET	61070	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:56:58.736727953 CET	53	61070	1.1.1.1	192.168.2.5
Mar 25, 2025 20:56:58.744309902 CET	53	54598	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:00.720623970 CET	50947	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:00.720983982 CET	53839	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:00.731862068 CET	52581	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:00.732002974 CET	54754	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:00.830487967 CET	53	53839	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:00.838742971 CET	53	50947	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:00.843086004 CET	53	54754	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:00.872327089 CET	53	52581	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:01.262101889 CET	53581	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:01.262240887 CET	56680	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:01.366882086 CET	53	53581	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:01.372334003 CET	53	56680	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:01.929330111 CET	58999	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:01.929491043 CET	54956	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:02.036045074 CET	53	53265	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:02.039150953 CET	53	58999	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:02.039486885 CET	53	54956	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:02.713592052 CET	53	51188	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:03.392601013 CET	57746	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:03.392887115 CET	58217	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:03.493776083 CET	53	50626	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:03.498687983 CET	53	58217	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:03.501463890 CET	53	57746	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:04.022114992 CET	58062	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:04.022507906 CET	54249	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:04.054111958 CET	49967	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:04.054234028 CET	61742	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:04.056370974 CET	51816	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:04.056711912 CET	57277	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:04.128577948 CET	53	58062	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:04.132138014 CET	53	54249	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:04.158683062 CET	53	49967	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:04.159455061 CET	53	61742	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:04.167043924 CET	53	57277	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:04.202079058 CET	53	51816	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:07.936614037 CET	53	57364	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:09.225691080 CET	63180	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:09.226022005 CET	54710	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:09.367398977 CET	53	54710	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:09.370588064 CET	53	63180	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:09.807318926 CET	64085	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:09.807452917 CET	57037	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:09.942106009 CET	53	57037	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:09.958338022 CET	53	64085	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:11.484651089 CET	50534	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:11.484651089 CET	49557	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:11.586690903 CET	53	50534	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:11.586707115 CET	53	49557	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:12.459173918 CET	53	63033	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:12.979198933 CET	53	64748	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:13.862397909 CET	51102	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:13.862695932 CET	54861	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:13.969345093 CET	53	54861	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:13.975840092 CET	53	51102	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:26.893837929 CET	53	63759	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:26.969161034 CET	61728	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:26.969417095 CET	60542	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:27.076328993 CET	53	61728	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:27.219799995 CET	53	60542	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:28.259637117 CET	60333	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:28.259797096 CET	49958	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:28.466655016 CET	53	60333	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:28.589788914 CET	53	49958	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:28.981484890 CET	54263	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:28.981734037 CET	63080	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:29.106983900 CET	53	63080	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:29.212081909 CET	53	54263	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:29.665996075 CET	52464	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:29.666429043 CET	64165	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:29.768316984 CET	53	52464	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:29.770020008 CET	53	64165	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:31.874449015 CET	49402	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:31.874449968 CET	51765	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:31.882144928 CET	62469	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:31.882144928 CET	58360	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:31.982080936 CET	53	51765	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:31.982655048 CET	53	49402	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:31.988068104 CET	53	58360	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:31.997654915 CET	53	62469	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:32.406477928 CET	60556	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:32.406744957 CET	64795	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:32.514451981 CET	53	60556	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:32.537693024 CET	53	64795	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:32.694935083 CET	56623	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:32.695100069 CET	57133	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:57:32.797396898 CET	53	56623	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:32.798031092 CET	53	57133	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:35.246268034 CET	53	60214	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:36.935894012 CET	138	138	192.168.2.5	192.168.2.255
Mar 25, 2025 20:57:49.364298105 CET	53	59374	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:49.851752043 CET	53	56236	1.1.1.1	192.168.2.5
Mar 25, 2025 20:57:52.419554949 CET	53	56531	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:03.920027018 CET	59920	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:03.920274019 CET	63226	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:04.023690939 CET	53	59920	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:04.024305105 CET	53	63226	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:04.940963030 CET	53807	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:04.941198111 CET	51141	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:05.047483921 CET	53	53807	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:06.972496033 CET	55702	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:07.078702927 CET	53	55702	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:07.971966028 CET	55702	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:08.074112892 CET	53	55702	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:08.987570047 CET	55702	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:09.092766047 CET	53	55702	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:10.990818977 CET	55702	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:11.096278906 CET	53	55702	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:13.863141060 CET	64936	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:13.863585949 CET	55073	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:13.969394922 CET	53	55073	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:13.969422102 CET	53	64936	1.1.1.1	192.168.2.5
Mar 25, 2025 20:58:15.002931118 CET	55702	53	192.168.2.5	1.1.1.1
Mar 25, 2025 20:58:15.107775927 CET	53	55702	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 25, 2025 20:56:50.840080023 CET	192.168.2.5	1.1.1.1	c1fa	(Port unreachable)	Destination Unreachable
Mar 25, 2025 20:57:27.219887018 CET	192.168.2.5	1.1.1.1	c27a	(Port unreachable)	Destination Unreachable
Mar 25, 2025 20:57:28.589868069 CET	192.168.2.5	1.1.1.1	c27a	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:55 UTC	2055	OUT	GET /v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi~XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm~hJ/~js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0~j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi~f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq~TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVYS0X0KYZ7yL4sKD3oGL4Jh912KMW2FDY0tBYEVE315DYZ65XZ4u [TRUNCATED] Host: protect.checkpoint.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:55 UTC	1644	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Tue, 25 Mar 2025 19:56:55 GMT set-cookie: x-cloud-sec-ctp = ec8ca0a5-b816-45aa-8063-7a63a4876c5d; Secure; HttpOnly; path=/; expires=25-Mar-2026 19:56:55 GMT location: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Apigw-Requestid: H_6VRjawDoEEM-g= X-Cache: Miss from cloudfront Via: 1.1 09a970c514541c01d3b3e83903632062.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P6 X-Amz-Cf-Id: 2T0GpXnHTUyXYNpoIK88lLJhZP9CEJTOpH_IW3Fw5h0PZb1cVC_K6Q==

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:56 UTC	1816	OUT	GET /scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Host: lsems.gravityzone.bitdefender.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:56 UTC	585	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 880 Connection: close Last-Modified: Wed, 19 Mar 2025 09:57:27 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 25 Mar 2025 14:26:44 GMT ETag: "eba76f3b62e097867c0b5d15cf4315af" Via: 1.1 9bfafde51fc331b971140cbd2b98172e.cloudfront.net (CloudFront), 1.1 311c7090bbd74195d36f13c7bad14cfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: F2yScU9K3MVstI4xE-jjlnRmYL1P0MZFkchVfxr3Q7Dc-uDiT6Rrzg== Age: 19813
2025-03-25 19:56:56 UTC	880	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 53 63 61 6e 22 2f 3e 3c 6c 69 6e Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><meta name="description" content="Scan"/><lin

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:56 UTC	1714	OUT	GET /index.css HTTP/1.1 Host: lsems.gravityzone.bitdefender.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:57 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 134 Connection: close Last-Modified: Wed, 19 Mar 2025 09:57:27 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 0ed062928320c9569a09db8a928795e4.cloudfront.net (CloudFront), 1.1 bf1882b87be33343d40479518a081ae2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Date: Tue, 25 Mar 2025 19:56:58 GMT ETag: "6748fbbc7fb3b016e371219d605b1239" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: 07aY-I-pu6JR6gI9PgVvMG1qsfYMX1RFVTavr22zBP3gKSL73wHG4w==
2025-03-25 19:56:57 UTC	134	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 61 6c 65 77 61 79 2c 48 65 6c 76 65 74 69 63 61 4e 65 75 65 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 0a 7d Data Ascii: body { background-color: #fff; color: #222; font-family: Raleway,HelveticaNeue,Helvetica Neue,Helvetica,Arial,sans-serif}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:56 UTC	1733	OUT	GET /static/css/main.3dfe9f5e.css HTTP/1.1 Host: lsems.gravityzone.bitdefender.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!dXBuPXUwMDEuTDAtMkZMVFRPVmRpbHhEdTRvQkRFQWFZd1Q3cDU0NHVUdGRzRWJhM05yMG9LSVdBWXJyM1hVUXpxS0ZScHBmYW5VYktOaU1mTUd6SklPLTJCMWFPdENWWU5VOXlQeTZSMU9Tbk94d0pERTM2bXVzeGV5THZ1bExlb2hGMmh1eE9Zbi0yQm14SVJLQ1RIaFo1UWc2SEJTclRDSXVqYkM5NXVSaUh1aWRCZlowUFRJT1RsZmFkUVJic3VwNGJTZHc3Ym5YUnRsY1BmLTJCNXNidDRUQ0V2QWJudjlOajVsT2N0eEcxNndMcGdUUDZGY0JPTUh6cE56enZoakpRc0lJdDE4aHh3bFVxOHVZandqZ000dkQtMkJtOTVseFVvOWhLTTJaR0pPN3ZXdldxemZlSDE2YjVNb3VMMjlTeDV6eVpIWldRRkhuYnEwN1U2VWJtMmNwaC0yRkRjYjNxVXJRWEFxd05yMnNoZFN5MDhrWFUtMkZ4cnd6a1pUMndjeXpUMXhPbVFnLTJCdzF1MEV5R3NjLTJCSUpENjBMOHlKYmNXbm5oVWsyZHA2VnNhNGJJU1ZScW5ad28xR1B4a0JHQnBIbTR3SDlnNHl6OEM3MEswbFlVSzV4cm50elhEU1hsMXNOQmtxUkxYRm9IaVEzNnQyUHY0LTJGMnVBMU9ZZkhZeTFPLTJGaHVsUXR3S3dHaVZNLTJGRDB2ekJoXzRwaWhIeWdOU0IwcjlSZlcwZDQ0T0R2LTJCUU5ubG81VFBwZnJsRUtlRlFieWpVWkRzYTJzdEhnWHcwV3pEeGdyUUwxVVRNeHhlWDhyS1hKQTNVSVFTU2tGZnFyYjBGZEc4WXFHRXAyTVowTzQzYW0yTU10SUZpOUdFSTdsd1NJN0QyNUx0 [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:56 UTC	607	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 4584 Connection: close Last-Modified: Wed, 19 Mar 2025 09:57:27 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 fc5ebd2517d85e358aa686aaadd64c2a.cloudfront.net (CloudFront), 1.1 028229e6bd0161988b8a68b3a1abfad2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Date: Tue, 25 Mar 2025 19:56:56 GMT ETag: "8fc5a2f23a27198d9e865e74add2673c" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: xFHuFFUIjOzjzKT7Rruo6Z2KwIsS1ZWjaow-afgsAXszPahugD9xcQ== Age: 7366
2025-03-25 19:56:56 UTC	4584	IN	Data Raw: 2e 73 63 61 6e 6e 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 2d 73 70 69 6e 20 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 2d 73 70 69 6e 20 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 37 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 2e 35 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 77 69 64 74 68 3a 37 65 6d 7d 2e 73 63 61 6e 2d 63 6c 65 61 6e 7b 64 69 73 70 6c 61 Data Ascii: .scanner{-webkit-animation:loader-spin 1.2s linear infinite;animation:loader-spin 1.2s linear infinite;border:2px solid;border-radius:50%;display:inline-block;height:7em;margin-bottom:3.5em;position:relative;vertical-align:top;width:7em}.scan-clean{displa

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:56 UTC	1717	OUT	GET /static/js/main.d62e4927.js HTTP/1.1 Host: lsems.gravityzone.bitdefender.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:56 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 266441 Connection: close Last-Modified: Wed, 19 Mar 2025 09:57:27 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 90ac509e6263ee9fa7bb3f1ed1f46118.cloudfront.net (CloudFront), 1.1 028229e6bd0161988b8a68b3a1abfad2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Date: Tue, 25 Mar 2025 11:37:27 GMT ETag: "f3dc5fda1f5ecbd5f39d4bf333d98130" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: 90Oy2e1plaQMpJjifXmixaukpc_mWrVOVxAGzJXmO7iae_gZP2X0bQ== Age: 29970
2025-03-25 19:56:56 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 64 36 32 65 34 39 32 37 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 38 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 6f 2e 72 65 73 65 74 57 61 72 6e 69 6e 67 43 61 63 68 65 3d 61 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 2c 61 2c 6f 2c 69 29 7b 69 66 28 69 21 3d 3d 72 29 7b 76 61 72 20 6c 3d 6e 65 77 20 45 72 72 6f 72 Data Ascii: /! For license information please see main.d62e4927.js.LICENSE.txt /!function(){var e={888:function(e,t,n){"use strict";var r=n(47);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,i){if(i!==r){var l=new Error
2025-03-25 19:56:56 UTC	16384	IN	Data Raw: 2c 33 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 65 7d 76 61 72 20 6b 65 3d 6e 75 6c 6c 2c 78 65 3d 6e 75 6c 6c 2c 45 65 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 5f 65 28 65 29 7b 69 66 28 65 3d 62 61 28 65 29 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 6b 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 32 38 30 29 29 3b 76 61 72 20 74 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 74 26 26 28 74 3d 53 61 28 74 29 2c 6b 65 28 65 2e 73 74 61 74 65 4e 6f 64 65 2c 65 2e 74 79 70 65 2c 74 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 65 29 7b 78 65 3f 45 65 3f 45 65 2e 70 75 73 68 28 65 29 3a 45 65 3d 5b 65 5d 3a 78 65 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 29 7b 69 66 28 78 65 29 7b 76 Data Ascii: ,3===e.nodeType?e.parentNode:e}var ke=null,xe=null,Ee=null;function _e(e){if(e=ba(e)){if("function"!==typeof ke)throw Error(o(280));var t=e.stateNode;t&&(t=Sa(t),ke(e.stateNode,e.type,t))}}function Ce(e){xe?Ee?Ee.push(e):Ee=[e]:xe=e}function Oe(){if(xe){v
2025-03-25 19:56:57 UTC	12288	IN	Data Raw: 6e 28 74 29 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 74 3d 51 28 29 3b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d 65 6e 74 3b 29 7b 74 72 79 7b 76 61 72 20 6e 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 72 29 7b 6e 3d 21 31 7d 69 66 28 21 6e 29 62 72 65 61 6b 3b 74 3d 51 28 28 65 3d 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 70 72 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 Data Ascii: n(t))))}function dr(){for(var e=window,t=Q();t instanceof e.HTMLIFrameElement;){try{var n="string"===typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=Q((e=t.contentWindow).document)}return t}function pr(e){var t=e&&e.nodeName&&e.nodeName.t
2025-03-25 19:56:57 UTC	16384	IN	Data Raw: 65 73 6f 6c 76 65 28 6e 75 6c 6c 29 2e 74 68 65 6e 28 65 29 2e 63 61 74 63 68 28 6c 61 29 7d 3a 72 61 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2c 72 3d 30 3b 64 6f 7b 76 61 72 20 61 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 69 66 28 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 2c 61 26 26 38 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 22 2f 24 22 3d 3d 3d 28 6e 3d 61 2e 64 61 74 61 29 29 7b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 2c 76 6f 69 64 20 42 74 28 74 29 3b 72 2d 2d 7d 65 6c 73 65 22 24 22 21 3d 3d 6e Data Ascii: esolve(null).then(e).catch(la)}:ra;function la(e){setTimeout((function(){throw e}))}function ua(e,t){var n=t,r=0;do{var a=n.nextSibling;if(e.removeChild(n),a&&8===a.nodeType)if("/$"===(n=a.data)){if(0===r)return e.removeChild(a),void Bt(t);r--}else"$"!==n
2025-03-25 19:56:57 UTC	3095	IN	Data Raw: 63 68 28 69 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 53 3a 65 3a 7b 66 6f 72 28 76 61 72 20 73 3d 69 2e 6b 65 79 2c 63 3d 6f 3b 6e 75 6c 6c 21 3d 3d 63 3b 29 7b 69 66 28 63 2e 6b 65 79 3d 3d 3d 73 29 7b 69 66 28 28 73 3d 69 2e 74 79 70 65 29 3d 3d 3d 78 29 7b 69 66 28 37 3d 3d 3d 63 2e 74 61 67 29 7b 6e 28 72 2c 63 2e 73 69 62 6c 69 6e 67 29 2c 28 6f 3d 61 28 63 2c 69 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 29 29 2e 72 65 74 75 72 6e 3d 72 2c 72 3d 6f 3b 62 72 65 61 6b 20 65 7d 7d 65 6c 73 65 20 69 66 28 63 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 3d 3d 73 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 73 26 26 6e 75 6c 6c 21 3d 3d 73 26 26 73 2e 24 24 74 79 70 65 6f 66 3d 3d 3d 41 26 26 59 6f 28 73 29 3d 3d 3d 63 2e 74 79 70 65 29 Data Ascii: ch(i.$$typeof){case S:e:{for(var s=i.key,c=o;null!==c;){if(c.key===s){if((s=i.type)===x){if(7===c.tag){n(r,c.sibling),(o=a(c,i.props.children)).return=r,r=o;break e}}else if(c.elementType===s\|\|"object"===typeof s&&null!==s&&s.$$typeof===A&&Yo(s)===c.type)
2025-03-25 19:56:57 UTC	16384	IN	Data Raw: 69 7a 65 64 53 74 61 74 65 3a 76 69 2e 6e 65 78 74 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 76 69 3d 74 2c 67 69 3d 65 3b 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 31 30 29 29 3b 65 3d 7b 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3a 28 67 69 3d 65 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2c 62 61 73 65 53 74 61 74 65 3a 67 69 2e 62 61 73 65 53 74 61 74 65 2c 62 61 73 65 51 75 65 75 65 3a 67 69 2e 62 61 73 65 51 75 65 75 65 2c 71 75 65 75 65 3a 67 69 2e 71 75 65 75 65 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 2c 6e 75 6c 6c 3d 3d 3d 76 69 3f 6d 69 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 76 69 3d 65 3a 76 69 3d 76 69 2e 6e 65 78 74 3d 65 7d 72 65 74 75 72 6e 20 76 69 7d 66 75 6e 63 74 69 6f 6e 20 50 69 28 65 Data Ascii: izedState:vi.next;if(null!==t)vi=t,gi=e;else{if(null===e)throw Error(o(310));e={memoizedState:(gi=e).memoizedState,baseState:gi.baseState,baseQueue:gi.baseQueue,queue:gi.queue,next:null},null===vi?mi.memoizedState=vi=e:vi=vi.next=e}return vi}function Pi(e
2025-03-25 19:56:57 UTC	16384	IN	Data Raw: 28 72 2e 73 75 73 70 65 6e 64 65 64 4c 61 6e 65 73 7c 6c 29 29 3f 30 3a 61 29 26 26 61 21 3d 3d 69 2e 72 65 74 72 79 4c 61 6e 65 26 26 28 69 2e 72 65 74 72 79 4c 61 6e 65 3d 61 2c 52 6f 28 65 2c 61 29 2c 72 73 28 72 2c 65 2c 61 2c 2d 31 29 29 7d 72 65 74 75 72 6e 20 67 73 28 29 2c 55 6c 28 65 2c 74 2c 6c 2c 72 3d 66 6c 28 45 72 72 6f 72 28 6f 28 34 32 31 29 29 29 29 7d 72 65 74 75 72 6e 22 24 3f 22 3d 3d 3d 61 2e 64 61 74 61 3f 28 74 2e 66 6c 61 67 73 7c 3d 31 32 38 2c 74 2e 63 68 69 6c 64 3d 65 2e 63 68 69 6c 64 2c 74 3d 50 73 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 2c 61 2e 5f 72 65 61 63 74 52 65 74 72 79 3d 74 2c 6e 75 6c 6c 29 3a 28 65 3d 69 2e 74 72 65 65 43 6f 6e 74 65 78 74 2c 72 6f 3d 73 61 28 61 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 2c 6e 6f 3d Data Ascii: (r.suspendedLanes\|l))?0:a)&&a!==i.retryLane&&(i.retryLane=a,Ro(e,a),rs(r,e,a,-1))}return gs(),Ul(e,t,l,r=fl(Error(o(421))))}return"$?"===a.data?(t.flags\|=128,t.child=e.child,t=Ps.bind(null,e),a._reactRetry=t,null):(e=i.treeContext,ro=sa(a.nextSibling),no=
2025-03-25 19:56:57 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 54 73 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 2c 74 29 3b 6e 2e 68 61 73 28 74 29 7c 7c 28 6e 2e 61 64 64 28 74 29 2c 74 2e 74 68 65 6e 28 72 2c 72 29 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 75 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 64 65 6c 65 74 69 6f 6e 73 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 72 5d 3b 74 72 79 7b 76 61 72 20 69 3d 65 2c 6c 3d 74 2c 75 3d 6c 3b 65 3a 66 6f 72 28 3b 6e 75 6c 6c 21 3d 3d 75 3b 29 7b 73 77 69 74 63 68 28 75 2e 74 61 67 29 7b 63 61 73 65 20 35 3a 66 75 3d 75 2e 73 74 61 74 65 4e 6f 64 65 2c 64 75 3d 21 31 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 33 3a 63 61 73 Data Ascii: nction(t){var r=Ts.bind(null,e,t);n.has(t)\|\|(n.add(t),t.then(r,r))}))}}function gu(e,t){var n=t.deletions;if(null!==n)for(var r=0;r<n.length;r++){var a=n[r];try{var i=e,l=t,u=l;e:for(;null!==u;){switch(u.tag){case 5:fu=u.stateNode,du=!1;break e;case 3:cas
2025-03-25 19:56:57 UTC	16384	IN	Data Raw: 59 75 29 7b 76 61 72 20 65 3d 77 74 28 47 75 29 2c 74 3d 50 75 2e 74 72 61 6e 73 69 74 69 6f 6e 2c 6e 3d 62 74 3b 74 72 79 7b 69 66 28 50 75 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 6e 75 6c 6c 2c 62 74 3d 31 36 3e 65 3f 31 36 3a 65 2c 6e 75 6c 6c 3d 3d 3d 59 75 29 76 61 72 20 72 3d 21 31 3b 65 6c 73 65 7b 69 66 28 65 3d 59 75 2c 59 75 3d 6e 75 6c 6c 2c 47 75 3d 30 2c 30 21 3d 3d 28 36 26 54 75 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 33 33 31 29 29 3b 76 61 72 20 61 3d 54 75 3b 66 6f 72 28 54 75 7c 3d 34 2c 5a 6c 3d 65 2e 63 75 72 72 65 6e 74 3b 6e 75 6c 6c 21 3d 3d 5a 6c 3b 29 7b 76 61 72 20 69 3d 5a 6c 2c 6c 3d 69 2e 63 68 69 6c 64 3b 69 66 28 30 21 3d 3d 28 31 36 26 5a 6c 2e 66 6c 61 67 73 29 29 7b 76 61 72 20 75 3d 69 2e 64 65 6c 65 74 69 6f 6e 73 Data Ascii: Yu){var e=wt(Gu),t=Pu.transition,n=bt;try{if(Pu.transition=null,bt=16>e?16:e,null===Yu)var r=!1;else{if(e=Yu,Yu=null,Gu=0,0!==(6&Tu))throw Error(o(331));var a=Tu;for(Tu\|=4,Zl=e.current;null!==Zl;){var i=Zl,l=i.child;if(0!==(16&Zl.flags)){var u=i.deletions
2025-03-25 19:56:57 UTC	16384	IN	Data Raw: 41 74 4e 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 4a 73 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 34 30 29 29 3b 72 65 74 75 72 6e 21 21 65 2e 5f 72 65 61 63 74 52 6f 6f 74 43 6f 6e 74 61 69 6e 65 72 26 26 28 66 73 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 63 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 65 2c 21 31 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 72 65 61 63 74 52 6f 6f 74 43 6f 6e 74 61 69 6e 65 72 3d 6e 75 6c 6c 2c 65 5b 68 61 5d 3d 6e 75 6c 6c 7d 29 29 7d 29 29 2c 21 30 29 7d 2c 74 2e 75 6e 73 74 61 62 6c 65 5f 62 61 74 63 68 65 64 55 70 64 61 74 65 73 3d 63 73 2c 74 2e 75 6e 73 74 61 62 6c 65 5f 72 65 6e 64 65 72 53 75 62 74 72 65 65 49 6e 74 6f 43 6f 6e 74 61 69 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e Data Ascii: AtNode=function(e){if(!Js(e))throw Error(o(40));return!!e._reactRootContainer&&(fs((function(){ec(null,null,e,!1,(function(){e._reactRootContainer=null,e[ha]=null}))})),!0)},t.unstable_batchedUpdates=cs,t.unstable_renderSubtreeIntoContainer=function(e,t,n

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:58 UTC	1683	OUT	OPTIONS /scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Host: api-bd.linkscan.io Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-original-referer Origin: https://lsems.gravityzone.bitdefender.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://lsems.gravityzone.bitdefender.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:58 UTC	624	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Date: Tue, 25 Mar 2025 19:56:58 GMT Access-Control-Allow-Methods: OPTIONS,GET x-amzn-RequestId: afc000a8-06d0-4a98-b3af-8537a430dd4e Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,X-Amz-User-Agent,X-Original-Referer x-amz-apigw-id: H_6VsEOgDoEEgmA= X-Cache: Miss from cloudfront Via: 1.1 ecc843250500aa5c06bbd62ad8a4abd6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: JJCqLa5FP6fUSjm_H-YkEzaCM8SpMSfoyXPXSQr1_xnBVm7RrAJCbw==

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:58 UTC	1762	OUT	GET /favicon.ico HTTP/1.1 Host: lsems.gravityzone.bitdefender.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:58 UTC	625	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 17542 Connection: close Last-Modified: Wed, 19 Mar 2025 09:57:27 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 4ec656d2dfbb59cd7fab2ac94a540522.cloudfront.net (CloudFront), 1.1 bf1882b87be33343d40479518a081ae2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Date: Mon, 24 Mar 2025 23:55:09 GMT ETag: "fba58480381fefa10f97bd44c76c87c7" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: ldEgdkJuSks2-DwDILfvzKIkBZozq5ehLcC91A6PCEwOPFlHSk2Btw== Age: 72110
2025-03-25 19:56:58 UTC	16384	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 ae 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 de 1e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 39 00 00 ff a4 00 00 ff e5 00 00 ff f9 00 00 ff fb 00 00 ff ec 00 00 ff b5 00 00 ff 52 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 0a 00 00 ff 9d 00 00 ff fe 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff c0 00 00 ff 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 07 00 00 ff bf 00 00 ff ff 00 Data Ascii: hF 600 %( @9R
2025-03-25 19:56:58 UTC	1158	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 1a 00 00 ff 96 00 00 ff f4 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff dd 00 00 ff 67 00 00 ff 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 2e 00 Data Ascii: g.

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:58 UTC	1703	OUT	GET /manifest.json HTTP/1.1 Host: lsems.gravityzone.bitdefender.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://lsems.gravityzone.bitdefender.com/scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:58 UTC	610	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 290 Connection: close Last-Modified: Wed, 19 Mar 2025 09:57:27 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 7e915a939f247f09de4523929f10bb0a.cloudfront.net (CloudFront), 1.1 714aec87803632a2b6676117b4a6b042.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Date: Tue, 25 Mar 2025 19:56:59 GMT ETag: "b0efba333d201884ace7da8c274c50d6" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: EXDPigjzhRWgUG8Q29jnNbpSBnWnQrV6M8b005vGnXxOo1Pb7Qmp2Q==
2025-03-25 19:56:58 UTC	290	IN	Data Raw: 7b 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 4c 69 6e 6b 73 63 61 6e 22 2c 0a 20 20 22 6e 61 6d 65 22 3a 20 22 4c 69 6e 6b 73 63 61 6e 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 36 34 78 36 34 20 33 32 78 33 32 20 32 34 78 32 34 20 31 36 78 31 36 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 0a 20 20 20 20 7d 0a 20 20 5d 2c 0a 20 20 22 73 74 61 72 74 5f 75 72 6c 22 3a 20 22 2e 22 2c 0a 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 20 22 23 30 30 30 30 30 30 22 2c Data Ascii: { "short_name": "Linkscan", "name": "Linkscan", "icons": [ { "src": "favicon.ico", "sizes": "64x64 32x32 24x24 16x16", "type": "image/x-icon" } ], "start_url": ".", "display": "standalone", "theme_color": "#000000",

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:58 UTC	1781	OUT	GET /scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Host: api-bd.linkscan.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" X-Original-Referer: unknown sec-ch-ua-mobile: ?0 Origin: https://lsems.gravityzone.bitdefender.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://lsems.gravityzone.bitdefender.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:00 UTC	562	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 2500 Connection: close Date: Tue, 25 Mar 2025 19:57:00 GMT X-Amzn-Trace-Id: Root=1-67e30a8b-4f4102b15083b9137ae23ce5;Parent=4a1a1298ed46236b;Sampled=0;Lineage=1:92f4b973:0 x-amzn-RequestId: 62b55cbd-8719-45e3-b162-eb9e05be6660 Access-Control-Allow-Origin: * x-amz-apigw-id: H_6VyEkAjoEEbvw= X-Cache: Miss from cloudfront Via: 1.1 983c7b4dc16774878ead1f5daf9bb81e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: m7KgGUmGlUvHXmQRl2tB_doWksnuAw6W4w8y9a6Qt_O-ztgfTnlUag==
2025-03-25 19:57:00 UTC	2500	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 64 61 74 61 22 3a 7b 22 6f 72 69 67 69 6e 61 6c 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6d 61 69 6c 2e 66 72 69 65 6e 64 62 75 79 2d 6d 61 69 6c 2e 63 6f 6d 2f 6c 73 2f 63 6c 69 63 6b 3f 75 70 6e 3d 75 30 30 31 2e 4c 30 2d 32 46 4c 54 54 4f 56 64 69 6c 78 44 75 34 6f 42 44 45 41 61 59 77 54 37 70 35 34 34 75 54 74 64 73 45 62 61 33 4e 72 30 6f 4b 49 57 41 59 72 72 33 58 55 51 7a 71 4b 46 52 70 70 66 61 6e 55 62 4b 4e 69 4d 66 4d 47 7a 4a 49 4f 2d 32 42 31 61 4f 74 43 56 59 4e 55 39 79 50 79 36 52 31 4f 53 6e 4f 78 77 4a 44 45 33 36 6d 75 73 78 65 79 4c 76 75 6c 4c 65 6f 68 46 32 68 75 78 4f 59 6e 2d 32 42 6d 78 49 52 4b 43 54 48 68 5a 35 51 67 36 48 42 53 72 54 43 49 75 6a 62 43 39 35 75 52 69 48 75 Data Ascii: {"success":true,"data":{"originalUrl":"https://email.friendbuy-mail.com/ls/click?upn=u001.L0-2FLTTOVdilxDu4oBDEAaYwT7p544uTtdsEba3Nr0oKIWAYrr3XUQzqKFRppfanUbKNiMfMGzJIO-2B1aOtCVYNU9yPy6R1OSnOxwJDE36musxeyLvulLeohF2huxOYn-2BmxIRKCTHhZ5Qg6HBSrTCIujbC95uRiHu

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:56:58 UTC	408	OUT	GET /favicon.ico HTTP/1.1 Host: lsems.gravityzone.bitdefender.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:56:59 UTC	625	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 17542 Connection: close Last-Modified: Wed, 19 Mar 2025 09:57:27 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 4ec656d2dfbb59cd7fab2ac94a540522.cloudfront.net (CloudFront), 1.1 e90cf336d9fb5e5789ae3c5966f7fbfe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P3 Date: Mon, 24 Mar 2025 23:55:09 GMT ETag: "fba58480381fefa10f97bd44c76c87c7" Vary: Accept-Encoding X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: akXo8u9EJTVSYrr-qxig7-d6Pb_syCmLwr75jXaHY0brAx4wv2gp0g== Age: 72111
2025-03-25 19:56:59 UTC	16384	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 ae 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 de 1e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 39 00 00 ff a4 00 00 ff e5 00 00 ff f9 00 00 ff fb 00 00 ff ec 00 00 ff b5 00 00 ff 52 00 00 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 0a 00 00 ff 9d 00 00 ff fe 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff c0 00 00 ff 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 07 00 00 ff bf 00 00 ff ff 00 Data Ascii: hF 600 %( @9R
2025-03-25 19:56:59 UTC	1158	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 1a 00 00 ff 96 00 00 ff f4 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff dd 00 00 ff 67 00 00 ff 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 2e 00 Data Ascii: g.

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:01 UTC	1466	OUT	GET /ls/click?upn=u001.L0-2FLTTOVdilxDu4oBDEAaYwT7p544uTtdsEba3Nr0oKIWAYrr3XUQzqKFRppfanUbKNiMfMGzJIO-2B1aOtCVYNU9yPy6R1OSnOxwJDE36musxeyLvulLeohF2huxOYn-2BmxIRKCTHhZ5Qg6HBSrTCIujbC95uRiHuidBfZ0PTIOTlfadQRbsup4bSdw7bnXRtlcPf-2B5sbt4TCEvAbnv9Nj5lOctxG16wLpgTP6FcBOMHzpNzzvhjJQsIIt18hxwlUq8uYjwjgM4vD-2Bm95lxUo9hKM2ZGJO7vWvWqzfeH16b5MouL29Sx5zyZHZWQFHnbq07U6Ubm2cph-2FDcb3qUrQXAqwNr2shdSy08kXU-2FxrwzkZT2wcyzT1xOmQg-2Bw1u0EyGsc-2BIJD60L8yJbcWnnhUk2dp6Vsa4bISVRqnZwo1GPxkBGBpHm4wH9g4yz8C70K0lYUK5xrntzXDSXl1sNBkqRLXFoHiQ36t2Pv4-2F2uA1OYfHYy1O-2FhulQtwKwGiVM-2FD0vzBh_4pihHygNSB0r9RfW0d44ODv-2BQNnlo5TPpfrlEKeFQbyjUZDsa2stHgXw0WzDxgrQL1UTMxxeX8rKXJA3UIQSSkFfqrb0FdG8YqGEp2MZ0O43am2MMtIFi9GEI7lwSI7D25LtFxMhPt3F0xmlk1k4ZAYsRTPoStv3Dp4h7YwQiaebej8iBKNF3EOEEu91H2oP HTTP/1.1 Host: email.friendbuy-mail.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://lsems.gravityzone.bitdefender.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:01 UTC	764	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 399 Connection: close Server: nginx Date: Tue, 25 Mar 2025 19:57:01 GMT X-Robots-Tag: noindex, nofollow Location: https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs&e=o16scqrIeBHXmZGYO8_FQaSfHor19ogR&cee=Y2hyaXN0b3BoZXIuYWxsYW5AcnByby50ZWNo X-Cache: Miss from cloudfront Via: 1.1 ab8bcd9c092f618064e495d01acbd726.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P2 X-Amz-Cf-Id: tLruarGuhBFkxfQapzBJijMF-FQ9WzLAK7KFNwmIkf3OWLZ0YoKTtg==
2025-03-25 19:57:01 UTC	399	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 35 39 31 2d 6b 61 64 6f 6d 61 2e 74 72 61 6b 63 69 64 2e 63 6f 6d 2f 3f 75 3d 68 74 74 70 73 3a 25 32 46 25 32 46 65 6d 61 69 6c 2e 69 64 78 68 6f 6d 65 2e 63 6f 25 32 46 63 25 32 46 65 4a 77 63 79 72 46 53 78 43 41 51 41 4e 43 76 67 5a 4c 5a 57 33 59 54 72 71 43 77 4d 49 55 66 59 45 2d 57 35 63 68 4d 6c 45 6a 51 69 33 5f 76 6a 50 33 4c 63 51 70 6c 6e 6f 72 56 65 4a 73 4a 37 7a 43 46 77 4c 5a 47 6b 6b 52 53 56 6d 62 57 49 44 43 72 59 42 4c 69 66 4d 39 53 79 45 2d 65 37 52 59 52 6b 4d 45 6a 33 35 41 43 6b 50 4d 53 4f 4b 7a 4b 54 4f 78 7a 57 63 45 51 62 50 6d 71 37 55 4f 64 4e 4c 76 48 4f 73 5a 78 47 76 39 69 63 44 47 34 66 4f 5f 39 34 5a 35 66 44 37 6c 2d 31 79 75 6e 37 76 51 30 75 4b 69 38 50 64 39 66 5f Data Ascii: <a href="https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:01 UTC	1515	OUT	GET /scan/aHR0cHM6Ly9lbWFpbC5mcmllbmRidXktbWFpbC5jb20vbHMvY2xpY2s!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 [TRUNCATED] Host: api-bd.linkscan.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:01 UTC	560	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 74 Connection: close Date: Tue, 25 Mar 2025 19:57:01 GMT X-Amzn-Trace-Id: Root=1-67e30a8d-4e4764aa6f3734df036cb035;Parent=429808cd44613460;Sampled=0;Lineage=1:92f4b973:0 x-amzn-RequestId: 460f3a23-59fc-4c35-824b-2c628037fedf Access-Control-Allow-Origin: * x-amz-apigw-id: H_6WJHhQjoEEs-g= X-Cache: Miss from cloudfront Via: 1.1 bf1882b87be33343d40479518a081ae2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P9 X-Amz-Cf-Id: avIn9i9gcewwI3l7JJgoSWo_P9geHI_-LaQTuUVQIcejsjAIrKrxcw==
2025-03-25 19:57:01 UTC	74	IN	Data Raw: 7b 22 65 72 72 6f 72 54 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 65 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 49 6e 74 65 67 72 69 74 79 20 6d 61 74 63 68 20 66 61 69 6c 75 72 65 22 2c 22 74 72 61 63 65 22 3a 5b 5d 7d Data Ascii: {"errorType":"string","errorMessage":"Integrity match failure","trace":[]}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:01 UTC	1048	OUT	GET /?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs&e=o16scqrIeBHXmZGYO8_FQaSfHor19ogR&cee=Y2hyaXN0b3BoZXIuYWxsYW5AcnByby50ZWNo HTTP/1.1 Host: 591-kadoma.trakcid.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://lsems.gravityzone.bitdefender.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:01 UTC	747	IN	HTTP/1.1 200 OK x-guploader-uploadid: AKDAyIsD2VLFtpKHWNRFPZW9Fp-GRJagmif4f8_xKDPasxthOG8Ebf4nkgKMP1fPYwzg5dme expires: Tue, 25 Mar 2025 20:57:01 GMT date: Tue, 25 Mar 2025 19:57:01 GMT cache-control: public, max-age=3600 last-modified: Mon, 20 Jan 2025 09:27:00 GMT etag: "78877e3ed39845f745b02a119900ec49" x-goog-generation: 1737365220556059 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 6443 content-type: text/html x-goog-hash: crc32c=tv1Ghg== x-goog-hash: md5=eId+PtOYRfdFsCoRmQDsSQ== x-goog-storage-class: STANDARD accept-ranges: bytes Content-Length: 6443 server: UploadServer via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:01 UTC	473	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 2e 73 61 6c 65 73 66 6c 61 72 65 2e 63 6f 6d 2f 66 6c 61 72 65 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4d 6f 6e 74 73 65 72 72 61 74 3a 34 30 30 2c 37 30 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 0a 20 20 20 20 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 Data Ascii: <html> <head> <title>Redirecting...</title> <script src="https://track.salesflare.com/flare.js"></script> <link href="https://fonts.googleapis.com/css?family=Montserrat:400,700" rel="stylesheet"> </head> <body style="
2025-03-25 19:57:01 UTC	1220	IN	Data Raw: 68 65 61 64 69 6e 67 22 3e 57 61 6e 74 20 74 6f 20 74 72 61 63 6b 20 79 6f 75 72 20 65 6d 61 69 6c 73 20 75 73 69 6e 67 20 53 61 6c 65 73 66 6c 61 72 65 20 61 73 20 77 65 6c 6c 3f 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 38 70 78 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 74 72 69 61 6c 42 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 73 66 2d 62 75 74 74 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 73 61 6c 65 73 66 6c 61 72 65 2e 63 6f 6d 2f 23 Data Ascii: heading">Want to track your emails using Salesflare as well?</h1> </div> <div style="display:flex; margin-top: 48px;"> <a id="trialButton" class="sf-button" href="https://app.salesflare.com/#
2025-03-25 19:57:01 UTC	1220	IN	Data Raw: 74 69 6f 6e 20 69 73 56 61 6c 69 64 28 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 72 73 2e 74 20 7c 7c 20 76 61 72 73 2e 65 20 7c 7c 20 21 76 61 72 73 2e 75 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 42 61 73 65 64 20 6f 6e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6e 64 72 65 73 6f 72 68 75 73 2f 70 72 65 70 65 6e 64 2d 68 74 74 70 2f 62 6c 6f 62 2f 30 34 30 35 37 39 66 62 31 32 37 31 64 66 36 32 33 32 64 64 39 36 61 37 36 30 30 63 39 65 66 62 31 35 31 30 65 62 34 37 2f 69 6e 64 65 78 2e 6a 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 61 6e 69 74 69 7a 65 55 52 4c 28 75 72 6c 29 20 7b 0a 0a 20 20 20 20 20 Data Ascii: tion isValid() { return vars.t \|\| vars.e \|\| !vars.u; } // Based on https://github.com/sindresorhus/prepend-http/blob/040579fb1271df6232dd96a7600c9efb1510eb47/index.js function sanitizeURL(url) {
2025-03-25 19:57:01 UTC	1220	IN	Data Raw: 20 20 64 65 63 6f 64 65 64 20 3d 20 75 6e 65 73 63 61 70 65 28 73 74 72 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 65 63 6f 64 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6d 2c 20 75 2c 20 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 72 69 67 69 6e 61 6c 55 72 6c 20 3d 20 76 61 72 73 2e 75 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6f 72 69 67 69 6e 61 6c 55 72 6c 20 3d 3d 3d 20 75 Data Ascii: decoded = unescape(string); } return decoded; } window.onerror = function (m, u, l) { try { var originalUrl = vars.u; if (originalUrl === u
2025-03-25 19:57:01 UTC	1220	IN	Data Raw: 66 20 28 21 69 73 56 61 6c 69 64 55 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 6f 6d 61 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3b 20 2f 2f 20 67 65 74 20 74 68 65 20 70 72 6f 74 6f 63 6f 6c 20 61 6e 64 20 64 6f 6d 61 69 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 74 61 72 74 73 57 69 74 68 28 27 2f 73 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 6d 61 69 6e 20 2b 3d 20 27 2f 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 Data Ascii: f (!isValidUrl) { var domain = window.location.origin; // get the protocol and domain if (window.location.pathname.startsWith('/s')) { domain += '/s'; } window.location.hr
2025-03-25 19:57:01 UTC	1090	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 66 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: text-align: center; } } .sf-button { margin:auto; text-transform: uppercase;

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:02 UTC	575	OUT	GET /flare.js HTTP/1.1 Host: track.salesflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://591-kadoma.trakcid.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:02 UTC	1202	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:57:02 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-guploader-uploadid: AKDAyIsEEhWAZQhlr3rjtluk5y32ovWrpdTNcshiAfickGtghtmS_qCeDJYocU0OqFH5AFdSNHclU04 x-goog-generation: 1721220840788064 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 468 content-language: en x-goog-hash: crc32c=SndjCg== x-goog-hash: md5=uQ1qbcWz0Hk8yvnPYkH7uw== x-goog-storage-class: STANDARD expires: Tue, 25 Mar 2025 22:54:48 GMT Cache-Control: public, max-age=14400 last-modified: Wed, 17 Jul 2024 12:54:00 GMT vary: Accept-Encoding,Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 3734 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9XTUCWw%2BI56O051JkHV%2BSeQ%2BHQMMSlVtO52wW%2FmhPqXbgnCIyOb44v3vZSjKuPhLx78ga3i7MY2t42RaHKxOmdpQDnIBM0CI0DVJjMbsJO2ltPCcESa7fb1PWca1edrdP15a%2Br7T"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9260f99a4f49728f-EWR
2025-03-25 19:57:02 UTC	220	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 30 31 39 33 39 26 6d 69 6e 5f 72 74 74 3d 31 30 31 30 37 35 26 72 74 74 5f 76 61 72 3d 32 32 36 35 38 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 33 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 34 37 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 35 38 30 32 26 63 77 6e 64 3d 32 31 31 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 65 35 62 32 31 34 30 36 32 64 63 36 31 61 39 34 26 74 73 3d 32 38 32 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=101939&min_rtt=101075&rtt_var=22658&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1147&delivery_rate=35802&cwnd=211&unsent_bytes=0&cid=e5b214062dc61a94&ts=282&x=0"
2025-03-25 19:57:02 UTC	949	IN	Data Raw: 33 61 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 73 63 72 69 70 74 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 74 72 61 63 6b 2e 73 61 6c 65 73 66 6c 61 72 65 2e 63 6f 6d 2f 61 63 74 75 61 6c 5f 66 6c 61 72 65 2e 6a 73 22 3b 66 6f 72 28 76 61 72 20 6c 6f 61 64 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2c 73 63 72 69 70 74 45 6c 65 6d 65 6e 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 69 3d 30 3b 69 3c 73 63 72 69 70 74 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b Data Ascii: 3ae"use strict";var script=document.createElement("script");script.src="https://storage.googleapis.com/track.salesflare.com/actual_flare.js";for(var loadScriptElement,scriptElements=document.getElementsByTagName("script"),i=0;i<scriptElements.length;i++
2025-03-25 19:57:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:03 UTC	611	OUT	GET /token?email=o16scqrIeBHXmZGYO8_FQaSfHor19ogR HTTP/1.1 Host: api.salesflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://591-kadoma.trakcid.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://591-kadoma.trakcid.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:03 UTC	530	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 vary: origin access-control-allow-origin: https://591-kadoma.trakcid.com access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache accept-ranges: bytes x-cloud-trace-context: 0a43553129164290cfc3e50f5b6b1479 date: Tue, 25 Mar 2025 19:57:03 GMT server: Google Frontend Content-Length: 66 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:03 UTC	66	IN	Data Raw: 7b 22 74 72 61 63 6b 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 49 35 39 30 79 78 79 6b 65 2d 5a 36 4f 30 4d 6a 5f 5f 75 77 77 78 36 31 6d 4c 62 74 77 58 6d 5a 46 76 31 37 77 78 7a 50 2d 4e 37 37 4d 22 7d Data Ascii: {"tracking_token":"I590yxyke-Z6O0Mj__uwwx61mLbtwXmZFv17wxzP-N77M"}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:04 UTC	426	OUT	GET /token?email=o16scqrIeBHXmZGYO8_FQaSfHor19ogR HTTP/1.1 Host: api.salesflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:04 UTC	469	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 vary: origin access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache accept-ranges: bytes x-cloud-trace-context: c2c0e058be70cee6ccbd4eda71e02886 date: Tue, 25 Mar 2025 19:57:04 GMT server: Google Frontend Content-Length: 66 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:04 UTC	66	IN	Data Raw: 7b 22 74 72 61 63 6b 69 6e 67 5f 74 6f 6b 65 6e 22 3a 22 49 35 39 30 79 78 79 6b 65 2d 5a 36 4f 30 4d 6a 5f 5f 75 77 77 78 36 31 6d 4c 62 74 77 58 6d 5a 46 76 31 37 77 78 7a 50 2d 4e 37 37 4d 22 7d Data Ascii: {"tracking_token":"I590yxyke-Z6O0Mj__uwwx61mLbtwXmZFv17wxzP-N77M"}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:04 UTC	612	OUT	GET /npm/@sentry/browser@5.29.2/build/bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://storage.googleapis.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://storage.googleapis.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:04 UTC	768	IN	HTTP/1.1 200 OK Connection: close Content-Length: 65311 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.29.2 X-JSD-Version-Type: version ETag: W/"ff1f-tqCXvFcJJITCoIIqq76zHuvUrxQ" Accept-Ranges: bytes Age: 530229 Date: Tue, 25 Mar 2025 19:57:04 GMT X-Served-By: cache-fra-etou8220037-FRA, cache-lga21940-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 2f 2a 21 20 40 73 65 6e 74 72 79 2f 62 72 6f 77 73 65 72 20 35 2e 32 39 2e 32 20 28 36 62 34 66 33 30 34 29 20 7c 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 67 65 74 73 65 6e 74 72 79 2f 73 65 6e 74 72 79 2d 6a 61 76 61 73 63 72 69 70 74 20 2a 2f 0a 76 61 72 20 53 65 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 Data Ascii: /! @sentry/browser 5.29.2 (6b4f304) \| https://github.com/getsentry/sentry-javascript /var Sentry=function(t){var n=function(t,r){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,n){t.__proto__=n}\|\|function(t,n){for(var r in n)
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 72 6f 72 45 76 65 6e 74 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 72 72 6f 72 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 Data Ascii: rorEvent]"===Object.prototype.toString.call(t)}function d(t){return"[object DOMError]"===Object.prototype.toString.call(t)}function p(t){return"[object String]"===Object.prototype.toString.call(t)}function y(t){return null===t\|\|"object"!=typeof t&&"functi
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 65 72 69 74 79 3d 7b 7d 29 29 2e 46 61 74 61 6c 3d 22 66 61 74 61 6c 22 2c 6f 2e 45 72 72 6f 72 3d 22 65 72 72 6f 72 22 2c 6f 2e 57 61 72 6e 69 6e 67 3d 22 77 61 72 6e 69 6e 67 22 2c 6f 2e 4c 6f 67 3d 22 6c 6f 67 22 2c 6f 2e 49 6e 66 6f 3d 22 69 6e 66 6f 22 2c 6f 2e 44 65 62 75 67 3d 22 64 65 62 75 67 22 2c 6f 2e 43 72 69 74 69 63 61 6c 3d 22 63 72 69 74 69 63 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 66 72 6f 6d 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 64 65 62 75 67 22 3a 72 65 74 75 72 6e 20 74 2e 44 65 62 75 67 3b 63 61 73 65 22 69 6e 66 6f 22 3a 72 65 74 75 72 6e 20 74 2e 49 6e 66 6f 3b 63 61 73 65 22 77 61 72 6e 22 3a 63 61 73 65 22 77 61 72 6e 69 6e 67 22 3a 72 65 74 75 72 6e Data Ascii: erity={})).Fatal="fatal",o.Error="error",o.Warning="warning",o.Log="log",o.Info="info",o.Debug="debug",o.Critical="critical",function(t){t.fromString=function(n){switch(n){case"debug":return t.Debug;case"info":return t.Info;case"warn":case"warning":return
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 21 31 29 3b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 6e 2e 68 6f 73 74 2c 65 3d 6e 2e 70 61 74 68 2c 69 3d 6e 2e 70 61 73 73 2c 6f 3d 6e 2e 70 6f 72 74 2c 75 3d 6e 2e 70 72 6f 6a 65 63 74 49 64 3b 72 65 74 75 72 6e 20 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 3a 2f 2f 22 2b 6e 2e 75 73 65 72 2b 28 74 26 26 69 3f 22 3a 22 2b 69 3a 22 22 29 2b 22 40 22 2b 72 2b 28 6f 3f 22 3a 22 2b 6f 3a 22 22 29 2b 22 2f 22 2b 28 65 3f 65 2b 22 2f 22 3a 65 29 2b 75 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 53 2e 65 78 65 63 28 74 29 3b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 77 20 6b 28 22 49 6e 76 61 6c 69 64 20 44 73 6e 22 29 3b 76 61 72 Data Ascii: function(t){void 0===t&&(t=!1);var n=this,r=n.host,e=n.path,i=n.pass,o=n.port,u=n.projectId;return n.protocol+"://"+n.user+(t&&i?":"+i:"")+"@"+r+(o?":"+o:"")+"/"+(e?e+"/":e)+u},t.prototype.t=function(t){var n=S.exec(t);if(!n)throw new k("Invalid Dsn");var
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 66 28 74 68 69 73 2e 73 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 73 2e 70 75 73 68 28 74 29 2c 21 31 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 6d 65 6d 6f 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 75 29 74 68 69 73 2e 73 2e 64 65 6c 65 74 65 28 74 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 68 69 73 2e 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 68 69 73 2e 73 5b 6e 5d 3d 3d 3d 74 29 7b 74 68 69 73 2e 73 2e 73 70 6c 69 63 65 28 6e 2c 31 29 3b 62 72 65 61 6b 7d 7d 2c 74 7d 28 29 2c 44 3d 22 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 22 3b 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: f(this.s[n]===t)return!0}return this.s.push(t),!1},t.prototype.unmemoize=function(t){if(this.u)this.s.delete(t);else for(var n=0;n<this.s.length;n++)if(this.s[n]===t){this.s.splice(n,1);break}},t}(),D="<anonymous>";function R(t){try{return t&&"function"==
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 65 64 22 21 3d 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 26 26 45 28 74 2c 43 75 73 74 6f 6d 45 76 65 6e 74 29 26 26 28 6f 2e 64 65 74 61 69 6c 3d 69 2e 64 65 74 61 69 6c 29 2c 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 65 29 26 26 28 6f 5b 65 5d 3d 69 29 3b 72 65 74 75 72 6e 20 6f 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 71 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 7e 2d 65 6e 63 6f 64 65 55 52 49 28 74 29 2e 73 70 6c 69 74 28 2f 25 2e 2e 7c 2e 2f 29 2e 6c 65 6e 67 74 68 7d 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 74 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 Data Ascii: ed"!=typeof CustomEvent&&E(t,CustomEvent)&&(o.detail=i.detail),i)Object.prototype.hasOwnProperty.call(i,e)&&(o[e]=i);return o}return t}function q(t){return function(t){return~-encodeURI(t).split(/%..\|./).length}(JSON.stringify(t))}function L(t,n,r){void 0
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 3d 48 28 73 2c 6f 5b 73 5d 2c 72 2d 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 65 2e 75 6e 6d 65 6d 6f 69 7a 65 28 6e 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 50 28 74 2c 6e 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 72 65 74 75 72 6e 20 48 28 74 2c 72 2c 6e 29 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 2a 2a 6e 6f 6e 2d 73 65 72 69 61 6c 69 7a 61 62 6c 65 2a 2a 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 34 30 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 43 28 74 29 29 3b 69 66 28 72 2e 73 6f 72 74 28 29 2c 21 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 Data Ascii: =H(s,o[s],r-1,e));return e.unmemoize(n),u}function P(t,n){try{return JSON.parse(JSON.stringify(t,function(t,r){return H(t,r,n)}))}catch(t){return"non-serializable"}}function F(t,n){void 0===n&&(n=40);var r=Object.keys(C(t));if(r.sort(),!r.length)retur
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 47 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 6e 3d 74 2e 6d 61 74 63 68 28 2f 5e 28 28 5b 5e 3a 5c 2f 3f 23 5d 2b 29 3a 29 3f 28 5c 2f 5c 2f 28 5b 5e 5c 2f 3f 23 5d 2a 29 29 3f 28 5b 5e 3f 23 5d 2a 29 28 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 23 28 2e 2a 29 29 3f 24 2f 29 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 72 3d 6e 5b 36 5d 7c 7c 22 22 2c 65 3d 6e 5b 38 5d 7c 7c 22 22 3b 72 65 74 75 72 6e 7b 68 6f 73 74 3a 6e 5b 34 5d 2c 70 61 74 68 3a 6e 5b 35 5d 2c 70 72 6f 74 6f 63 6f 6c 3a 6e 5b 32 5d 2c 72 65 6c 61 74 69 76 65 3a 6e 5b 35 5d 2b 72 2b 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 69 66 28 74 2e 6d 65 73 73 61 67 65 29 72 65 74 75 72 6e 20 74 2e 6d 65 73 73 61 Data Ascii: )})}function G(t){if(!t)return{};var n=t.match(/^(([^:\/?#]+):)?(\/\/([^\/?#]))?([^?#])(\?([^#]))?(#(.))?$/);if(!n)return{};var r=n[6]\|\|"",e=n[8]\|\|"";return{host:n[4],path:n[5],protocol:n[2],relative:n[5]+r+e}}function z(t){if(t.message)return t.messa
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 21 30 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 74 68 69 73 2e 76 26 26 56 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5a 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 74 2b 22 5b 4c 6f 67 5d 3a 20 22 2b 74 2e 6a 6f 69 6e 28 22 20 22 29 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 74 68 69 73 2e 76 26 26 56 28 66 75 6e 63 74 69 Data Ascii: !0},t.prototype.log=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];this.v&&V(function(){Z.console.log(tt+"[Log]: "+t.join(" "))})},t.prototype.warn=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];this.v&&V(functi
2025-03-25 19:57:04 UTC	1378	IN	Data Raw: 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 64 6f 6d 22 29 29 2c 21 31 29 2c 73 74 2e 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 70 72 65 73 73 22 2c 67 74 28 76 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 64 6f 6d 22 29 29 2c 21 31 29 2c 5b 22 45 76 65 6e 74 54 61 72 67 65 74 22 2c 22 4e 6f 64 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 73 74 5b 74 5d 26 26 73 74 5b 74 5d 2e 70 72 6f 74 6f 74 79 70 65 3b 6e 26 26 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 26 26 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 26 26 28 41 28 6e 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: .bind(null,"dom")),!1),st.document.addEventListener("keypress",gt(vt.bind(null,"dom")),!1),["EventTarget","Node"].forEach(function(t){var n=st[t]&&st[t].prototype;n&&n.hasOwnProperty&&n.hasOwnProperty("addEventListener")&&(A(n,"addEventListener",function(

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:04 UTC	583	OUT	GET /flareprovider.js HTTP/1.1 Host: track.salesflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://storage.googleapis.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:04 UTC	1250	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 19:57:04 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-guploader-uploadid: AFIdbgR48F_G8lQymEZqoKpBT52_72qcne_EcvXGvm8W_HUutlGpQZSP5Ex459PEtH0y0PiDjCtnjk8 Cache-Control: public, max-age=14400 expires: Tue, 25 Mar 2025 20:27:39 GMT last-modified: Wed, 17 Jul 2024 12:54:02 GMT etag: W/"20dc9361bafa4df7c9ec1bdddeb62d02" vary: Accept-Encoding vary: Origin x-goog-generation: 1721220842789364 x-goog-metageneration: 2 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 10695 content-language: en x-goog-hash: crc32c=tqZ19A== x-goog-hash: md5=INyTYbr6TffJ7Bvd3rYtAg== x-goog-storage-class: STANDARD alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 12565 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NFOACEO52HB5haZcUZvrb4IyvJntUAICAKVXEJWEDvsB0vAOGDOTQU4IoexOFhSXIn6zRd12UFg4DJ8fi%2FFI8zitKg7GWSdUGkTbiSTqY%2B32jBY44m82wPl892lMO8YVjHe4aVNn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9260f9a7db457c69-EWR
2025-03-25 19:57:04 UTC	220	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 30 34 30 36 36 26 6d 69 6e 5f 72 74 74 3d 31 30 33 38 39 33 26 72 74 74 5f 76 61 72 3d 32 32 30 37 35 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 33 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 35 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 35 38 34 38 26 63 77 6e 64 3d 32 34 37 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 36 30 33 65 39 37 31 66 32 64 30 66 32 35 30 63 26 74 73 3d 32 37 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=104066&min_rtt=103893&rtt_var=22075&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1155&delivery_rate=35848&cwnd=247&unsent_bytes=0&cid=603e971f2d0f250c&ts=277&x=0"
2025-03-25 19:57:04 UTC	1268	IN	Data Raw: 37 39 37 32 0d 0a 76 61 72 20 72 70 63 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 22 55 6e 63 61 75 67 68 74 20 53 79 6e 74 61 78 45 72 72 6f 72 3a 20 46 61 69 6c 65 64 20 74 6f 20 65 78 65 63 75 74 65 20 27 70 6f 73 74 4d 65 73 73 61 67 65 27 20 6f 6e 20 27 57 69 6e 64 6f 77 27 3a 20 49 6e 76 61 6c 69 64 20 74 61 72 67 65 74 20 6f 72 69 67 69 6e 20 27 27 20 69 6e 20 61 20 63 61 6c 6c 20 74 6f 20 27 70 6f 73 74 4d 65 73 73 61 67 65 27 2e 22 3d 3d 3d 65 2e 6d 65 73 73 61 67 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 59 6f 75 20 61 72 65 20 72 75 6e 6e 69 6e 67 20 66 6c 61 72 65 2e Data Ascii: 7972var rpc;window.addEventListener("error",function(e){e.preventDefault(),"Uncaught SyntaxError: Failed to execute 'postMessage' on 'Window': Invalid target origin '' in a call to 'postMessage'."===e.message&&window.console.warn("You are running flare.
2025-03-25 19:57:04 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 74 2c 21 31 29 7d 3b 65 6c 73 65 7b 69 66 28 21 6a 28 67 2c 22 61 74 74 61 63 68 45 76 65 6e 74 22 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 72 6f 77 73 65 72 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 75 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 6e 2c 74 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 6e 2c 74 29 7d 7d 76 61 72 20 65 2c 6f 2c 61 3d 21 31 2c 69 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 69 66 28 21 61 29 7b 61 3d 21 30 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 Data Ascii: ction(e,n,t){e.removeEventListener(n,t,!1)};else{if(!j(g,"attachEvent"))throw new Error("Browser not supported");u=function(e,n,t){e.attachEvent("on"+n,t)},v=function(e,n,t){e.detachEvent("on"+n,t)}}var e,o,a=!1,i=[];function M(){if(!a){a=!0;for(var e=0;e
2025-03-25 19:57:04 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 68 28 6f 2c 31 29 7d 4d 28 29 7d 7d 29 28 29 29 2c 75 28 67 2c 22 6c 6f 61 64 22 2c 4d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 2c 74 3d 7b 7d 2c 72 3d 28 65 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2e 73 70 6c 69 74 28 22 26 22 29 29 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 74 5b 28 6e 3d 65 5b 72 5d 2e 73 70 6c 69 74 28 22 3d 22 29 29 5b 30 5d 5d 3d 70 28 6e 5b 31 5d 29 3b 72 65 74 75 72 6e 20 74 7d 28 2f 78 64 6d 5f 65 3d 2f 2e 74 65 73 74 28 66 2e 73 65 61 72 63 68 29 3f 66 2e 73 65 61 72 63 68 3a 66 2e 68 61 73 68 29 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 7d 76 61 72 20 44 2c 4a 3d 66 75 6e 63 74 69 6f 6e Data Ascii: {return void h(o,1)}M()}})()),u(g,"load",M));var A=function(e){for(var n,t={},r=(e=e.substring(1).split("&")).length;r--;)t[(n=e[r].split("="))[0]]=p(n[1]);return t}(/xdm_e=/.test(f.search)?f.search:f.hash);function R(e){return void 0===e}var D,J=function
2025-03-25 19:57:04 UTC	1369	IN	Data Raw: 66 61 6c 73 65 22 2c 49 28 74 2c 65 2e 70 72 6f 70 73 29 2c 74 2e 62 6f 72 64 65 72 3d 74 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 30 2c 74 2e 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 3d 21 30 2c 65 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 65 2e 6f 6e 4c 6f 61 64 26 26 75 28 74 2c 22 6c 6f 61 64 22 2c 65 2e 6f 6e 4c 6f 61 64 29 2c 65 2e 75 73 65 50 6f 73 74 29 7b 76 61 72 20 6f 2c 61 3d 65 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 29 3b 69 66 28 61 2e 74 61 72 67 65 74 3d 74 2e 6e 61 6d 65 2c 61 2e 61 63 74 69 6f 6e 3d 72 2c 61 2e 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f Data Ascii: false",I(t,e.props),t.border=t.frameBorder=0,t.allowTransparency=!0,e.container.appendChild(t),e.onLoad&&u(t,"load",e.onLoad),e.usePost){var o,a=e.container.appendChild(l.createElement("form"));if(a.target=t.name,a.action=r,a.method="POST","object"==typeo
2025-03-25 19:57:04 UTC	1369	IN	Data Raw: 6d 6f 74 65 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 41 63 63 65 73 73 20 64 65 6e 69 65 64 20 66 6f 72 20 22 2b 65 2e 72 65 6d 6f 74 65 29 3b 73 77 69 74 63 68 28 65 2e 70 72 6f 74 6f 63 6f 6c 3d 74 29 7b 63 61 73 65 22 30 22 3a 69 66 28 49 28 65 2c 7b 69 6e 74 65 72 76 61 6c 3a 31 30 30 2c 64 65 6c 61 79 3a 32 65 33 2c 75 73 65 52 65 73 69 7a 65 3a 21 30 2c 75 73 65 50 61 72 65 6e 74 3a 21 31 2c 75 73 65 50 6f 6c 6c 69 6e 67 3a 21 31 7d 2c 21 30 29 2c 65 2e 69 73 48 6f 73 74 29 7b 69 66 28 21 65 2e 6c 6f 63 61 6c 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 3d 66 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 66 2e 68 6f 73 74 2c 61 3d 6c 2e 62 6f 64 79 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 2c 69 3d Data Ascii: mote))throw new Error("Access denied for "+e.remote);switch(e.protocol=t){case"0":if(I(e,{interval:100,delay:2e3,useResize:!0,useParent:!1,usePolling:!1},!0),e.isHost){if(!e.local){for(var r,o=f.protocol+"//"+f.host,a=l.body.getElementsByTagName("img"),i=
2025-03-25 19:57:04 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 42 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 2c 74 3d 7b 69 6e 63 6f 6d 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 68 69 73 2e 75 70 2e 69 6e 63 6f 6d 69 6e 67 28 65 2c 6e 29 7d 2c 6f 75 74 67 6f 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 68 69 73 2e 64 6f 77 6e 2e 6f 75 74 67 6f 69 6e 67 28 65 2c 6e 29 7d 2c 63 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 75 70 2e 63 61 6c 6c 62 61 63 6b 28 65 29 7d 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 6f 77 6e 2e 69 6e 69 74 28 29 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 6f 77 6e 2e 64 65 73 74 72 6f 79 28 29 7d 7d 2c 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 Data Ascii: ction B(e){for(var n,t={incoming:function(e,n){this.up.incoming(e,n)},outgoing:function(e,n){this.down.outgoing(e,n)},callback:function(e){this.up.callback(e)},init:function(){this.down.init()},destroy:function(){this.down.destroy()}},r=0,o=e.length;r<o;r
2025-03-25 19:57:04 UTC	1369	IN	Data Raw: 64 65 73 74 72 6f 79 28 29 7d 2c 6f 2e 69 6e 69 74 28 29 7d 2c 53 2e 73 74 61 63 6b 2e 53 61 6d 65 4f 72 69 67 69 6e 54 72 61 6e 73 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 72 2c 6f 3b 72 65 74 75 72 6e 20 6e 3d 7b 6f 75 74 67 6f 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 28 65 29 2c 74 26 26 74 28 29 7d 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 26 26 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 29 7d 2c 6f 6e 44 4f 4d 52 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 50 28 65 2e 72 65 6d 6f 74 65 29 2c 65 2e 69 73 48 6f 73 74 3f 28 49 28 65 2e 70 72 6f 70 73 2c 7b 73 72 63 3a 43 28 65 2e 72 65 6d 6f 74 65 2c 7b 78 Data Ascii: destroy()},o.init()},S.stack.SameOriginTransport=function(e){var n,t,r,o;return n={outgoing:function(e,n,t){r(e),t&&t()},destroy:function(){t&&(t.parentNode.removeChild(t),t=null)},onDOMReady:function(){o=P(e.remote),e.isHost?(I(e.props,{src:C(e.remote,{x
2025-03-25 19:57:04 UTC	1369	IN	Data Raw: 6f 70 3a 30 7d 29 2c 6c 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 29 3b 76 61 72 20 72 3d 22 63 61 6c 6c 62 61 63 6b 3d 66 6c 61 73 68 5f 6c 6f 61 64 65 64 22 2b 64 28 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 2d 2e 5d 2f 67 2c 22 5f 22 29 29 2b 22 26 70 72 6f 74 6f 3d 22 2b 79 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 26 64 6f 6d 61 69 6e 3d 22 2b 64 28 4e 28 79 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 2b 22 26 70 6f 72 74 3d 22 2b 64 28 79 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6d 61 74 63 68 28 5f 29 5b 34 5d 7c 7c 22 22 29 2b 22 26 6e 73 3d 22 2b 64 28 78 29 3b 63 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 6f 62 6a 65 63 74 20 68 65 69 67 68 74 3d 27 32 30 27 20 77 69 64 74 68 3d 27 32 30 27 20 74 79 70 65 3d Data Ascii: op:0}),l.body.appendChild(c));var r="callback=flash_loaded"+d(t.replace(/[\-.]/g,"_"))+"&proto="+y.location.protocol+"&domain="+d(N(y.location.href))+"&port="+d(y.location.href.match(_)[4]\|\|"")+"&ns="+d(x);c.innerHTML="<object height='20' width='20' type=
2025-03-25 19:57:04 UTC	1369	IN	Data Raw: 7d 29 2c 72 3d 48 28 6f 29 29 7d 76 61 72 20 6e 3d 4e 28 6f 2e 73 77 66 29 3b 53 2e 73 74 61 63 6b 2e 46 6c 61 73 68 54 72 61 6e 73 70 6f 72 74 5b 6e 5d 26 26 53 2e 73 74 61 63 6b 2e 46 6c 61 73 68 54 72 61 6e 73 70 6f 72 74 5b 6e 5d 2e 69 6e 69 74 3f 65 28 29 3a 53 2e 73 74 61 63 6b 2e 46 6c 61 73 68 54 72 61 6e 73 70 6f 72 74 5b 6e 5d 3f 53 2e 73 74 61 63 6b 2e 46 6c 61 73 68 54 72 61 6e 73 70 6f 72 74 5b 6e 5d 2e 71 75 65 75 65 2e 70 75 73 68 28 65 29 3a 28 53 2e 73 74 61 63 6b 2e 46 6c 61 73 68 54 72 61 6e 73 70 6f 72 74 5b 6e 5d 3d 7b 71 75 65 75 65 3a 5b 65 5d 7d 2c 75 28 6e 29 29 7d 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 46 28 74 2e 6f 6e 44 4f 4d 52 65 61 64 79 2c 74 29 7d 7d 7d 2c 53 2e 73 74 61 63 6b 2e 50 6f 73 74 4d 65 73 73 61 67 Data Ascii: }),r=H(o))}var n=N(o.swf);S.stack.FlashTransport[n]&&S.stack.FlashTransport[n].init?e():S.stack.FlashTransport[n]?S.stack.FlashTransport[n].queue.push(e):(S.stack.FlashTransport[n]={queue:[e]},u(n))},init:function(){F(t.onDOMReady,t)}}},S.stack.PostMessag

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:04 UTC	531	OUT	OPTIONS /devices HTTP/1.1 Host: api.salesflare.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization Origin: https://591-kadoma.trakcid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://591-kadoma.trakcid.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:05 UTC	660	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://591-kadoma.trakcid.com access-control-allow-methods: POST access-control-allow-headers: Accept,Authorization,Content-Type,If-None-Match,x-salesflare-client,x-result-count,x-salesflare-actor access-control-max-age: 86400 access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache x-cloud-trace-context: 80718a5dadab43acf6fde702518261ba date: Tue, 25 Mar 2025 19:57:05 GMT content-type: text/html server: Google Frontend Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:04 UTC	944	OUT	GET /favicon.ico HTTP/1.1 Host: 591-kadoma.trakcid.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://591-kadoma.trakcid.com/?u=https:%2F%2Femail.idxhome.co%2Fc%2FeJwcyrFSxCAQANCvgZLZW3YTrqCwMIUfYE-W5chMlEjQi3_vjP3LcQplnorVeJsJ7zCFwLZGkkRSVmbWIDCrYBLifM9SyE-e7RYRkMEj35ACkPMSOKzKTOxzWcEQbPmq7UOdNLvHOsZxGv9icDG4fO_94Z5fD7l-1yun7vQ0uKi8Pd9f_wXZHqX27RztqNpd2vf0aQj60ZsbKtX-RPwLAAD___OCORs&e=o16scqrIeBHXmZGYO8_FQaSfHor19ogR&cee=Y2hyaXN0b3BoZXIuYWxsYW5AcnByby50ZWNo Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:05 UTC	761	IN	HTTP/1.1 404 Not Found x-guploader-uploadid: AKDAyIvI9sUnPpONqz1yc7h0WPKFgPtklbQoh1Z3WrXFU134Oe3Xb8DxrtQx4aqI8aPPNPMI6R7RKbI expires: Tue, 25 Mar 2025 20:57:05 GMT date: Tue, 25 Mar 2025 19:57:05 GMT cache-control: public, max-age=3600 last-modified: Mon, 20 Jan 2025 09:27:00 GMT etag: "35b50977890c59dd87536447601ff3d9" x-goog-generation: 1737365220799885 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 2016 content-type: text/html x-goog-hash: crc32c=Xo/u5A== x-goog-hash: md5=NbUJd4kMWd2HU2RHYB/z2Q== x-goog-storage-class: STANDARD accept-ranges: bytes Content-Length: 2016 server: UploadServer via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:05 UTC	459	IN	Data Raw: 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 22 3e 0a 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Content-type" content="text/html; charset=utf-8"><meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'"><title>Page not found
2025-03-25 19:57:05 UTC	1220	IN	Data Raw: 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 20 6d 61 72 67 69 6e 3a 20 35 30 70 78 20 61 75 74 6f 20 34 30 70 78 20 61 75 74 6f 3b 20 77 69 64 74 68 3a 20 36 30 30 70 78 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 0a 0a 20 20 20 20 20 20 61 20 7b 20 63 6f 6c 6f 72 3a 20 23 34 31 38 33 63 34 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 20 20 20 20 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 20 7d 0a 0a 20 20 20 20 20 20 68 31 20 7b 20 77 69 64 74 68 3a 20 38 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 6c 65 66 74 3a 20 2d 31 30 30 70 78 3b 20 6c 65 74 Data Ascii: ; } .container { margin: 50px auto 40px auto; width: 600px; text-align: center; } a { color: #4183c4; text-decoration: none; } a:hover { text-decoration: underline; } h1 { width: 800px; position:relative; left: -100px; let
2025-03-25 19:57:05 UTC	337	IN	Data Raw: 20 20 7d 0a 20 20 20 20 20 20 23 73 75 67 67 65 73 74 69 6f 6e 73 20 61 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 31 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 3c 68 31 3e 34 30 34 3c 2f 68 31 3e 0a 3c 70 3e 3c 73 74 72 6f 6e 67 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 0a 3c 70 3e 0a 54 68 65 20 73 69 74 65 20 63 6f 6e Data Ascii: } #suggestions a { color: #666666; font-weight: 200; font-size: 14px; margin: 0 10px; } </style></head><body><div class="container"><h1>404</h1><p><strong>Page not found</strong></p><p>The site con

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:05 UTC	703	OUT	POST /devices HTTP/1.1 Host: api.salesflare.com Connection: keep-alive Content-Length: 2 sec-ch-ua-platform: "Windows" Authorization: Bearer I590yxyke-Z6O0Mj__uwwx61mLbtwXmZFv17wxzP-N77M User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://591-kadoma.trakcid.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://591-kadoma.trakcid.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:05 UTC	2	OUT	Data Raw: 7b 7d Data Ascii: {}
2025-03-25 19:57:05 UTC	508	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 vary: origin access-control-allow-origin: https://591-kadoma.trakcid.com access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache x-cloud-trace-context: c345841a31c29cc044a6eb1e1d14dd6b date: Tue, 25 Mar 2025 19:57:05 GMT server: Google Frontend Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:05 UTC	16	IN	Data Raw: 7b 22 69 64 22 3a 32 38 32 30 39 38 35 32 31 7d Data Ascii: {"id":282098521}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:06 UTC	532	OUT	OPTIONS /contacts HTTP/1.1 Host: api.salesflare.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization Origin: https://591-kadoma.trakcid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://591-kadoma.trakcid.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:06 UTC	660	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://591-kadoma.trakcid.com access-control-allow-methods: POST access-control-allow-headers: Accept,Authorization,Content-Type,If-None-Match,x-salesflare-client,x-result-count,x-salesflare-actor access-control-max-age: 86400 access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache x-cloud-trace-context: 211707e3454aa1ac8a423356feeb5edf date: Tue, 25 Mar 2025 19:57:06 GMT content-type: text/html server: Google Frontend Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:06 UTC	389	OUT	GET /devices HTTP/1.1 Host: api.salesflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:06 UTC	454	IN	HTTP/1.1 404 Not Found content-type: application/json; charset=utf-8 vary: origin access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache x-cloud-trace-context: 56d610b22c4bb3843c22687b83871a4f date: Tue, 25 Mar 2025 19:57:06 GMT server: Google Frontend Content-Length: 60 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:06 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"error":"Not Found","message":"Not Found"}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:06 UTC	705	OUT	POST /contacts HTTP/1.1 Host: api.salesflare.com Connection: keep-alive Content-Length: 39 sec-ch-ua-platform: "Windows" Authorization: Bearer I590yxyke-Z6O0Mj__uwwx61mLbtwXmZFv17wxzP-N77M User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://591-kadoma.trakcid.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://591-kadoma.trakcid.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:06 UTC	39	OUT	Data Raw: 7b 22 65 6d 61 69 6c 22 3a 22 63 68 72 69 73 74 6f 70 68 65 72 2e 61 6c 6c 61 6e 40 72 70 72 6f 2e 74 65 63 68 22 7d Data Ascii: {"email":"christopher.allan@rpro.tech"}
2025-03-25 19:57:07 UTC	508	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 vary: origin access-control-allow-origin: https://591-kadoma.trakcid.com access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache x-cloud-trace-context: 5a9f91bed25412fb36f1fbbbf3bcf555 date: Tue, 25 Mar 2025 19:57:07 GMT server: Google Frontend Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:07 UTC	16	IN	Data Raw: 7b 22 69 64 22 3a 32 37 39 33 33 34 37 34 35 7d Data Ascii: {"id":279334745}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:07 UTC	540	OUT	OPTIONS /devices/282098521 HTTP/1.1 Host: api.salesflare.com Connection: keep-alive Accept: / Access-Control-Request-Method: PUT Access-Control-Request-Headers: authorization Origin: https://591-kadoma.trakcid.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://591-kadoma.trakcid.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:07 UTC	659	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://591-kadoma.trakcid.com access-control-allow-methods: PUT access-control-allow-headers: Accept,Authorization,Content-Type,If-None-Match,x-salesflare-client,x-result-count,x-salesflare-actor access-control-max-age: 86400 access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache x-cloud-trace-context: 3f9e39fcb6027138a765187aac3999ec date: Tue, 25 Mar 2025 19:57:07 GMT content-type: text/html server: Google Frontend Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:07 UTC	390	OUT	GET /contacts HTTP/1.1 Host: api.salesflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:07 UTC	543	IN	HTTP/1.1 401 Unauthorized www-authenticate: Bearer, Bearer, cookie content-type: application/json; charset=utf-8 vary: origin access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization,access-control-allow-headers,x-result-count cache-control: no-cache x-cloud-trace-context: a56bee688d0aed8a6a548559cbbf4a16 date: Tue, 25 Mar 2025 19:57:07 GMT server: Google Frontend Content-Length: 76 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:07 UTC	37	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 31 2c 22 65 72 72 6f 72 22 3a 22 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: {"statusCode":401,"error":"Unauthoriz
2025-03-25 19:57:07 UTC	39	IN	Data Raw: 65 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4d 69 73 73 69 6e 67 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 22 7d Data Ascii: ed","message":"Missing authentication"}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:07 UTC	713	OUT	PUT /devices/282098521 HTTP/1.1 Host: api.salesflare.com Connection: keep-alive Content-Length: 21 sec-ch-ua-platform: "Windows" Authorization: Bearer I590yxyke-Z6O0Mj__uwwx61mLbtwXmZFv17wxzP-N77M User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://591-kadoma.trakcid.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://591-kadoma.trakcid.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:07 UTC	21	OUT	Data Raw: 7b 22 63 6f 6e 74 61 63 74 22 3a 32 37 39 33 33 34 37 34 35 7d Data Ascii: {"contact":279334745}
2025-03-25 19:57:08 UTC	508	IN	HTTP/1.1 200 OK content-type: application/json; charset=utf-8 vary: origin access-control-allow-origin: https://591-kadoma.trakcid.com access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache x-cloud-trace-context: fb04da100286753f60a9dca65e012aeb date: Tue, 25 Mar 2025 19:57:08 GMT server: Google Frontend Content-Length: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:08 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 19:57:08 UTC	399	OUT	GET /devices/282098521 HTTP/1.1 Host: api.salesflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 19:57:08 UTC	454	IN	HTTP/1.1 404 Not Found content-type: application/json; charset=utf-8 vary: origin access-control-allow-credentials: true access-control-expose-headers: WWW-Authenticate,Server-Authorization cache-control: no-cache x-cloud-trace-context: b294339e5e2cd118d4717c633567d42c date: Tue, 25 Mar 2025 19:57:08 GMT server: Google Frontend Content-Length: 60 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-25 19:57:08 UTC	60	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 7d Data Ascii: {"statusCode":404,"error":"Not Found","message":"Not Found"}