Edit tour

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com

Overview

General Information

Sample URL:	https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com
Analysis ID:	1649292
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

HTML page contains hidden URLs

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,10559188872452267976,1991801886329010069,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2184 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6212 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ETPRO EXPLOIT Possible dhcpcd IPv6 IA/NA Buffer Overflow [Advertise 0x02] Inbound (CVE-2019-11577)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-26T16:22:02.148469+0100	2849429	1	Attempted Administrator Privilege Gain	1.1.1.1	53	192.168.2.9	52960	UDP
2025-03-26T16:22:03.222316+0100	2849429	1	Attempted Administrator Privilege Gain	1.1.1.1	53	192.168.2.9	52960	UDP
2025-03-26T16:22:04.222991+0100	2849429	1	Attempted Administrator Privilege Gain	1.1.1.1	53	192.168.2.9	52960	UDP
2025-03-26T16:22:06.233610+0100	2849429	1	Attempted Administrator Privilege Gain	1.1.1.1	53	192.168.2.9	52960	UDP
2025-03-26T16:22:10.244987+0100	2849429	1	Attempted Administrator Privilege Gain	1.1.1.1	53	192.168.2.9	52960	UDP

String found in binary or memory: <a class="elementor-icon elementor-social-icon elementor-social-icon-facebook-f elementor-animation-pop elementor-repeater-item-65d32fa" href="https://www.facebook.com/profile.php?id=100090418252440" target="_blank"> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: url.us.m.mimecastprotect.com
Source: global traffic	DNS traffic detected: DNS query: link.edgepilot.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: functionalhealths.com
Source: global traffic	DNS traffic detected: DNS query: rainbowangelshome.com

Source: unknown

HTTP traffic detected: POST /filter HTTP/1.1Host: link.edgepilot.comConnection: keep-aliveContent-Length: 313Cache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Origin: https://link.edgepilot.comContent-Type: application/x-www-form-urlencodedUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://link.edgepilot.com/s/4ab0affe/qs6FqDZthkO8zPVTOv9Txg?u=https://functionalhealths.com/encore/?id=hh7nhs%26p=mr__cooper_encryption%26c=1Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeexpires: Wed, 11 Jan 1984 05:00:00 GMTcache-control: no-cache, must-revalidate, max-age=0content-type: text/html; charset=UTF-8link: <https://functionalhealths.com/wp-json/>; rel="https://api.w.org/"x-litespeed-cache-control: public,max-age=3600x-litespeed-tag: e68_HTTP.404,e68_404,e68_URL.b26e343ee5d03dae91d827abe79a3808,e68_x-litespeed-cache: misstransfer-encoding: chunkeddate: Wed, 26 Mar 2025 15:21:21 GMTalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Source: chromecache_125.1.dr	String found in binary or memory: http://api.jquery.com/jQuery.browser
Source: chromecache_158.1.dr, chromecache_135.1.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_176.1.dr	String found in binary or memory: http://outdatedbrowser.com/en
Source: chromecache_170.1.dr	String found in binary or memory: http://stackoverflow.com/questions/11381673/javascript-solution-to-detect-mobile-browser
Source: chromecache_162.1.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_162.1.dr	String found in binary or memory: https://becreatech.com/
Source: chromecache_162.1.dr	String found in binary or memory: https://calendly.com/functionalhealths/45minuteshealthassemsentanddiscoverycall?hide_gdpr_banner=1
Source: chromecache_162.1.dr	String found in binary or memory: https://cdn.jotfor.ms/s/umd/latest/for-form-embed-handler.js
Source: chromecache_120.1.dr, chromecache_128.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_120.1.dr, chromecache_128.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: chromecache_128.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_120.1.dr, chromecache_128.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_184.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_184.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_184.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_184.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_184.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_184.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_184.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwkxduz8A.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlBduz8A.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmBduz8A.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmRduz8A.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmhduz8A.woff2)
Source: chromecache_116.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmxduz8A.woff2)
Source: chromecache_162.1.dr	String found in binary or memory: https://form.jotform.com/
Source: chromecache_162.1.dr	String found in binary or memory: https://form.jotform.com/230862089155056
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/#/schema/logo/image/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/#organization
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/#website
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/?page_id=3
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/?s=
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/articles/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/comments/feed/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/condtions/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/contact-us/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/etn
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/feed/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/our-approach/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/protocols/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/questionnaire/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/cart-for-woocommerce/assets/addon/embla-carousel.mi
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/cart-for-woocommerce/assets/css/style.min.css?ver=1
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/cart-for-woocommerce/assets/js/cart.min.js?ver=1.7.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/easy-login-woocommerce/assets/css/xoo-el-fonts.css?
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/easy-login-woocommerce/assets/css/xoo-el-style.css?
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/easy-login-woocommerce/assets/js/xoo-el-js.js?ver=2
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/easy-login-woocommerce/xoo-form-fields-fw/assets/cs
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/easy-login-woocommerce/xoo-form-fields-fw/assets/js
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/easy-login-woocommerce/xoo-form-fields-fw/lib/fonta
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.28.0
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.2
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.28.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ve
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.2
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.28.0
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.28
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/lib/animations/styles/slideInLeft.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?v
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/embed-calendly-scheduling/assets/css/widget.css?ver
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/embed-calendly-scheduling/assets/js/widget.js?ver=6
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/pro-elements/assets/css/conditionals/popup.min.css?
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/pro-elements/assets/css/widget-nav-menu.min.css?ver
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/pro-elements/assets/css/widget-slides.min.css?ver=3
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.27.4
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?v
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/pro-elements/assets/lib/smartmenus/jquery.smartmenu
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woo-stripe-payment/assets/build/stripe.css?ver=3.3.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woo-stripe-payment/assets/js/frontend/form-handler.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woo-stripe-payment/assets/js/frontend/mini-cart.min
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woo-stripe-payment/assets/js/frontend/wc-stripe.min
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/css/brands.css?ver=9.7.1
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=9
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=9.7.1
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/fonts/Inter-VariableFont_slnt
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/fonts/cardo_normal_400.woff2
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variatio
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?v
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.mi
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.j
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?v
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ve
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/themes/hello-elementor/header-footer.min.css?ver=3.3.0
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/themes/hello-elementor/style.min.css?ver=3.3.0
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/themes/hello-elementor/theme.min.css?ver=3.3.0
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/IMG_1092-300x225.png
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/IMG_1092-600x450.png
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/IMG_1092-768x576.png
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/IMG_1092.png
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/cropped-PNG-logo-Functional-health-100x100.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/cropped-PNG-logo-Functional-health-150x150.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/cropped-PNG-logo-Functional-health-300x300.
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/cropped-PNG-logo-Functional-health.png
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/08/cropped-cropped-PNG-logo-Functional-health-
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/2-1-243x300.jpg
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/2-1.jpg
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/3-243x300.jpg
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/3.jpg
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-1152x1536.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-1536x2048.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-225x300.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-768x1024.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-scaled-600x800.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-scaled.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-scaled.webp);
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-1024x768.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-1536x1152.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-2048x1536.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-300x225.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-768x576.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-scaled-600x450.webp
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/css/post-10.css?ver=1742659704
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/css/post-1211.css?ver=1742659707
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/css/post-30.css?ver=1742659706
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/css/post-32.css?ver=1742660308
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/css/post-408.css?ver=1742659707
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/css/post-426.css?ver=1742659707
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/css/post-44.css?ver=1742659706
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/css/post-887.css?ver=1742659707
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/google-fonts/css/inter.css?ver=1742454149
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-content/uploads/elementor/google-fonts/css/urbanist.css?ver=1742454
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/css/dist/block-library/style.min.css?ver=6.7.2
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/js/underscore.min.js?ver=1.13.7
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-includes/js/wp-util.min.js?ver=6.7.2
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/wp-json/
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/xmlrpc.php?rsd
Source: chromecache_162.1.dr	String found in binary or memory: https://functionalhealths.com/your-experience/
Source: chromecache_160.1.dr	String found in binary or memory: https://github.com/inuyaksa/jquery.nicescroll/pull/802
Source: chromecache_158.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_162.1.dr	String found in binary or memory: https://gmpg.org/xfn/11
Source: chromecache_162.1.dr	String found in binary or memory: https://js.stripe.com/v3/?ver=3.3.84
Source: chromecache_168.1.dr	String found in binary or memory: https://mrcooper.com
Source: chromecache_160.1.dr	String found in binary or memory: https://nicescroll.areaaperta.com
Source: chromecache_168.1.dr	String found in binary or memory: https://okresumes.com/manshot/
Source: chromecache_162.1.dr	String found in binary or memory: https://pay.google.com/gp/p/js/pay.js?ver=3.3.84
Source: chromecache_162.1.dr	String found in binary or memory: https://schema.org
Source: chromecache_168.1.dr	String found in binary or memory: https://url.us.m.mimecastprotect.com/s/CWKRCJ6M4Ps49rksVf2UymzPK?domain=link.edgepilot.com/
Source: chromecache_128.1.dr	String found in binary or memory: https://www.axure.com
Source: chromecache_162.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_162.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5GJQ34BK
Source: chromecache_162.1.dr	String found in binary or memory: https://www.instagram.com/functionalhealths/
Source: chromecache_162.1.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.32.100:443 -> 192.168.2.9:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 205.139.111.113:443 -> 192.168.2.9:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 205.139.111.113:443 -> 192.168.2.9:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.30.234.133:443 -> 192.168.2.9:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.9:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.9:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.9:49699 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.30.234.133:443 -> 192.168.2.9:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.159.76.85:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.159.76.85:443 -> 192.168.2.9:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.159.76.85:443 -> 192.168.2.9:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.159.76.85:443 -> 192.168.2.9:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.159.76.85:443 -> 192.168.2.9:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.159.76.85:443 -> 192.168.2.9:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.159.76.85:443 -> 192.168.2.9:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 205.139.111.117:443 -> 192.168.2.9:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.30.234.133:443 -> 192.168.2.9:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.74.235.190:443 -> 192.168.2.9:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.74.235.190:443 -> 192.168.2.9:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.74.235.190:443 -> 192.168.2.9:49816 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1760_2082760898

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1760_2082760898

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@25/162@22/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,10559188872452267976,1991801886329010069,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2184 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2044,i,10559188872452267976,1991801886329010069,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2184 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://functionalhealths.com/wp-content/uploads/elementor/css/post-408.css?ver=1742659707	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-1536x2048.webp	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-1152x1536.webp	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9540201&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002500	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/2-1-243x300.jpg	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woo-stripe-payment/assets/build/stripe.css?ver=3.3.	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ve	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/math.js	0%	Avira URL Cloud	safe
https://okresumes.com/manshot/	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/images/overflow-icon.svg	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/files/mr__cooper_encryption/data.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/plugins/page_notes/page_notes.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/images/left_arrow.svg	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.28.	0%	Avira URL Cloud	safe
https://functionalhealths.com/?page_id=3	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.28.0	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-225x300.webp	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-json/	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/images/favicon_play.svg	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/embed-calendly-scheduling/assets/js/widget.js?ver=6	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woo-stripe-payment/assets/js/frontend/wc-stripe.min	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?v	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/jquery.nicescroll.min.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/data/styles.css	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6842265&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002525	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/images/close.svg	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-768x576.webp	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.2	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6997911&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002512	0%	Avira URL Cloud	safe
https://functionalhealths.com/etn	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	0%	Avira URL Cloud	safe
https://functionalhealths.com	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	0%	Avira URL Cloud	safe
https://functionalhealths.com/comments/feed/	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/annotation.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7181724&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002520	0%	Avira URL Cloud	safe
https://www.axure.com	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/images/favicon_play.ico	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-scaled-600x800.webp	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/elementor/css/post-426.css?ver=1742659707	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-includes/js/wp-util.min.js?ver=6.7.2	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-300x225.webp	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/elementor/google-fonts/css/inter.css?ver=1742454149	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/images/caret_down.svg	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7105896&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002541	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/plugins/sitemap/sitemap.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/css/brands.css?ver=9.7.1	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/hintmanager.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/easy-login-woocommerce/xoo-form-fields-fw/assets/js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-1536x1152.webp	0%	Avira URL Cloud	safe
https://functionalhealths.com/	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/recording.js	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986864&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002529	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/08/IMG_1092.png	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/elementor/css/post-30.css?ver=1742659706	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/events.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-1024x768.webp	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/2-1.jpg	0%	Avira URL Cloud	safe
https://functionalhealths.com/protocols/	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9880470&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002508	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001045&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002494	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/action.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/elementor/css/post-44.css?ver=1742659706	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/css/default.css	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000531&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002504	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axutils.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/axQuery.std.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.2	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6712726&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002502	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/init.temp.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/08/cropped-PNG-logo-Functional-health-300x300.	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6670490&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002539	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/images/mr__cooper_encryption/u4.png	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843036&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002514	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/legacy.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.j	0%	Avira URL Cloud	safe
https://functionalhealths.com/#organization	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?v	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=9.7.1	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/css/axure_rp_page.css	0%	Avira URL Cloud	safe
https://functionalhealths.com/encore/resources/scripts/axure/geometry.js	0%	Avira URL Cloud	safe
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-scaled.webp	0%	Avira URL Cloud	safe
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7183255&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002510	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
link.edgepilot.com	199.30.234.133	true	false	high
url.us.m.mimecastprotect.com	205.139.111.113	true	false	high
code.jquery.com	151.101.2.137	true	false	high
functionalhealths.com	51.159.76.85	true	true	unknown
rainbowangelshome.com	76.74.235.190	true	true	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
www.google.com	142.251.32.100	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://functionalhealths.com/encore/resources/images/overflow-icon.svg	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/axure/math.js	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9540201&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002500	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/files/mr__cooper_encryption/data.js	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/plugins/page_notes/page_notes.js	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/images/left_arrow.svg	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/images/favicon_play.svg	false	Avira URL Cloud: safe	unknown
http://c.pki.goog/r/gsr1.crl	false		high
https://functionalhealths.com/encore/resources/scripts/axure/jquery.nicescroll.min.js	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/images/close.svg	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/data/styles.css	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6842265&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002525	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6997911&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002512	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7181724&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002520	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/axure/annotation.js	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/images/favicon_play.ico	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/plugins/sitemap/sitemap.js	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7105896&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002541	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/images/caret_down.svg	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/hintmanager.js	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/axure/recording.js	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6986864&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002529	false	Avira URL Cloud: safe	unknown
https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com	false		high
https://functionalhealths.com/encore/resources/scripts/axure/events.js	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10001045&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002494	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=9880470&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002508	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/axure/action.js	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/axutils.js	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=10000531&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002504	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/css/default.css	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/axure/axQuery.std.js	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6712726&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002502	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/axure/init.temp.js	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6670490&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002539	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=6843036&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002514	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/images/mr__cooper_encryption/u4.png	false	Avira URL Cloud: safe	unknown
https://link.edgepilot.com/s/46437820/FdSsyCQ4tkurUeX4Nm00Bw?u=https://rainbowangelshome.com/	false		high
https://functionalhealths.com/encore/resources/scripts/axure/legacy.js	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/css/axure_rp_page.css	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/encore/resources/scripts/axure/geometry.js	false	Avira URL Cloud: safe	unknown
https://rainbowangelshome.com/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=7183255&pdata=https%253A%252F%252Frainbowangelshome.com&id=7fa3b767c460b54a2be4d49030b349c7&ts=1743002510	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://functionalhealths.com/wp-content/uploads/elementor/css/post-408.css?ver=1742659707	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://mrcooper.com	chromecache_168.1.dr	false		high
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ve	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-1536x2048.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/woo-stripe-payment/assets/build/stripe.css?ver=3.3.	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://form.jotform.com/230862089155056	chromecache_162.1.dr	false		high
https://functionalhealths.com/wp-content/uploads/2024/10/2-1-243x300.jpg	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-1152x1536.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://okresumes.com/manshot/	chromecache_168.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.28.	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.28.0	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/?page_id=3	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-225x300.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_158.1.dr, chromecache_135.1.dr	false		high
https://functionalhealths.com/wp-json/	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/embed-calendly-scheduling/assets/js/widget.js?ver=6	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-768x576.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/woo-stripe-payment/assets/js/frontend/wc-stripe.min	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?v	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.2	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/etn	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com	chromecache_162.1.dr	true	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/comments/feed/	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_162.1.dr	false		high
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-scaled-600x800.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://www.axure.com	chromecache_128.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/elementor/css/post-426.css?ver=1742659707	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_158.1.dr	false		high
https://functionalhealths.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-300x225.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-includes/js/wp-util.min.js?ver=6.7.2	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/elementor/google-fonts/css/inter.css?ver=1742454149	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/css/brands.css?ver=9.7.1	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/easy-login-woocommerce/xoo-form-fields-fw/assets/js	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-1536x1152.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/	chromecache_162.1.dr	true	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/08/IMG_1092.png	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/elementor/css/post-30.css?ver=1742659706	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_162.1.dr	false		high
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1297-1024x768.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/10/2-1.jpg	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/protocols/	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
http://api.jquery.com/jQuery.browser	chromecache_125.1.dr	false		high
https://functionalhealths.com/wp-content/uploads/elementor/css/post-44.css?ver=1742659706	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/js/pay.js?ver=3.3.84	chromecache_162.1.dr	false		high
https://functionalhealths.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.2	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/08/cropped-PNG-logo-Functional-health-300x300.	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/single-product.min.j	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?v	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/#organization	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=9.7.1	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown
https://functionalhealths.com/wp-content/uploads/2024/10/IMG_1054-scaled.webp	chromecache_162.1.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
199.30.234.133	link.edgepilot.com	United States	13380	ASN-CUSTUS	false
205.139.111.117	unknown	United States	30031	MIMECAST-US	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
205.139.111.113	url.us.m.mimecastprotect.com	United States	30031	MIMECAST-US	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
142.251.32.100	www.google.com	United States	15169	GOOGLEUS	false
76.74.235.190	rainbowangelshome.com	Canada	13768	COGECO-PEER1CA	true
51.159.76.85	functionalhealths.com	France	12876	OnlineSASFR	true

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649292
Start date and time:	2025-03-26 16:20:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@25/162@22/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.251.32.110, 142.251.40.131, 142.251.179.84, 142.251.40.206, 142.251.41.10, 142.251.40.163, 142.250.65.234, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.251.40.106, 142.251.40.138, 142.251.40.170, 142.250.64.74, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.65.170, 142.250.65.202, 151.101.46.172, 4.245.163.56, 23.9.183.29
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 536, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	73170
Entropy (8bit):	7.982414953615867
Encrypted:	false
SSDEEP:	1536:tMMevs0bdscib2fpneEm8gMUXLuN1oYHTczjvVu8VeB:+LbdsPK5eEm8gMt9HTcfvW
MD5:	566B9BBF330328E2BB5784C047775AB0
SHA1:	A4D4171A995680BDC1C53A7A667DD7304EE7DE5D
SHA-256:	A160C07FD23199EF8DFE779473C3B85C415537E1B35F8E3CEDFEB1728A24C6DA
SHA-512:	33DBA90F1173C8215A6CB7E174E73E0429F1B28C358DE9FCD317AC0D29EEF0D94DE6045BE518D7E6B1A3A5654F89EEAD88B3029ECF7EC46B428E56100A99EB33
Malicious:	false
Reputation:	low
URL:	https://functionalhealths.com/encore/images/mr__cooper_encryption/u6.png
Preview:	.PNG........IHDR...:.........d,F.....sRGB........DeXIfMM........i.......................................:................P.....@.IDATx..}..]Ey.d..........E@VY\.D.X.Z.j.j...VmQ.Zmkkk......]...".l...@ ...d_....<g.3...%.\|..$...wf.s.y...sFl..J(........@A. .....9.).......@A. P.....SN..@A. P.(......Bt...........@A. P.N9......@A. P..[.....C[&V.(........@!:..(........@A.o.(D.o.m.XA. P.(.......s. P.(........E....=.eb...@A. P.(...S..@A. P.(......Bt...........@A. P.N9......@A. P..[.....C[&V.(........@!:..(........@A.o.(D.o.m.XA. P.(.......s. P.(........E....=.eb...@A. P.(...S..@A. P.(......Bt...........@A. P.N9......@A. P..[.....C[&V.(........@!:..(........@A.o.(D.o.m.XA. P.(.......s. P.(........E....=.eb...@A. P.(...S..@A. P.(.......};..'.m..%.XA. P.(.....).#F.H..U.IGt...V._.LA. P.(.....vu...'..I..n~N.........@A`."`m.p =}Mt,.3".O.6.. P.(.....Ov.R.....j[=.2.!..M*...:...... P.(..........m...2m.CQ.wD...e...y.........@A. P.x."`I.m&.<.x...n(.}Ct...... .f........@A.

Source: https://link.edgepilot.com/s/4ab0affe/qs6FqDZthkO8zPVTOv9Txg?u=https://functionalhealths.com/encore/?id=hh7nhs%26p=mr__cooper_encryption%26c=1	HTTP Parser: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1
Source: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1	HTTP Parser: https://rainbowangelshome.com/

Source: https://link.edgepilot.com/s/4ab0affe/qs6FqDZthkO8zPVTOv9Txg?u=https://functionalhealths.com/encore/?id=hh7nhs%26p=mr__cooper_encryption%26c=1	HTTP Parser: No favicon
Source: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1	HTTP Parser: No favicon
Source: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.73.143
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.73.143
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.80.35
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2025 16:20:59.815854073 CET	53	62754	1.1.1.1	192.168.2.9
Mar 26, 2025 16:20:59.880402088 CET	53	62226	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:00.566072941 CET	53	50135	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:03.819283962 CET	59071	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:03.819283962 CET	63872	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:03.904195070 CET	53	59071	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:03.904217958 CET	53	63872	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:05.142050982 CET	64860	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:05.142407894 CET	61836	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:05.456660032 CET	53	61836	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:05.457636118 CET	53	64860	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:06.384219885 CET	55729	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:06.385570049 CET	61581	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:06.471916914 CET	53	55729	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:06.473418951 CET	53	61581	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:07.420777082 CET	51413	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:07.421680927 CET	63643	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:07.422424078 CET	64479	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:07.431893110 CET	57838	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:07.507085085 CET	53	51413	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:07.507529020 CET	53	63643	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:07.507982969 CET	53	64479	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:07.517103910 CET	53	57838	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:08.597739935 CET	55744	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:08.597979069 CET	64163	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:08.681951046 CET	53	55744	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:08.682008028 CET	53	64163	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:09.396172047 CET	58460	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:09.396591902 CET	61875	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:09.575036049 CET	53	61875	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:09.599812984 CET	53	58460	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:10.485011101 CET	53	64910	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:12.511111021 CET	54253	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:12.511631966 CET	61067	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:12.597331047 CET	53	54253	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:12.597354889 CET	53	61067	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:14.839060068 CET	53	57564	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:17.608273029 CET	53	62161	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:30.451814890 CET	59624	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:30.451987028 CET	52510	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:30.537565947 CET	53	59624	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:30.537584066 CET	53	52510	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:31.659017086 CET	59256	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:31.659239054 CET	64357	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:31.744937897 CET	53	59256	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:31.744959116 CET	53	64357	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:33.728277922 CET	57014	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:33.729501009 CET	54422	53	192.168.2.9	1.1.1.1
Mar 26, 2025 16:21:33.827425957 CET	53	54422	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:33.892668009 CET	53	57014	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:36.518544912 CET	53	61732	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:41.857821941 CET	53	58935	162.159.36.2	192.168.2.9
Mar 26, 2025 16:21:59.109452963 CET	53	51114	1.1.1.1	192.168.2.9
Mar 26, 2025 16:21:59.111778021 CET	53	53681	1.1.1.1	192.168.2.9

Timestamp	Bytes transferred	Direction	Data
Mar 26, 2025 16:21:16.705856085 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 26, 2025 16:21:16.792514086 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 26 Mar 2025 14:43:27 GMT Expires: Wed, 26 Mar 2025 15:33:27 GMT Age: 2269 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 26, 2025 16:21:16.873552084 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 26, 2025 16:21:16.958616972 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 26 Mar 2025 14:43:30 GMT Expires: Wed, 26 Mar 2025 15:33:30 GMT Age: 2266 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:05 UTC	731	OUT	GET /s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com HTTP/1.1 Host: url.us.m.mimecastprotect.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:06 UTC	2328	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 26 Mar 2025 15:21:06 GMT Content-Length: 0 Connection: close Location: https://url.us.m.mimecastprotect.com/r/BeOVsz0yBniXXqtLdQ61w5EXZs4rlB3bM4hPE0Wclw34aTB6f-aBOLfdYk947YZeV6gy_uoSpN6J1J1wpRLRFlpAHZ9poRTp4_uJCjI_XuPgnMU8jd2y9Mp6nJFhCUjrJ3WWta3Dm9saQFBA5O7c3kgZ9NiOHA0LTYzRubTKuONRhZ2IWtLTUf-pbyvQ3Qn0QBORi72DjeHsM4uz5A-o9lfs2IrhAPhcNK2ZQnjdA_ENQ2QU1VQ7ZIykdCHLuqHrFuHG1NhjjjC7U2Zec_kphRr2fp64xCW1KHxReZAb7g_7X9f-vwuv96_IDQEKqPqFlpe8CEzh4D1iuA9bJ1OIZrUj0yL8UoSKSJB6UCJasLKhlBUWdRA4kpTOhw-aKBTqzk1KkGN_wSOVoDNgS7CISwYjvZLEgY0dYdJzeMEaH5Fzi64eTDGjxUWDd3TVwROYlXpPEyQxvHhiiIWXfC0GrKZgHxQQ2weQpkFXj9rrLj4zWeXdXfSaXuiFHufphGvcpWR-35V8qlqcJQwnPvU-K6959a0FpGLLVumsTJJsdYnRUF3rsvfi8xaPyht5wj__H-SifgXyzczo7Tkk7pZwQmdmoCJZ2IC1Q666pW-b7PHuXmEwgPRx_mBayodRAIyqDpaIuJXT-t8ZarMGPoDB6xnkhk6WSK4zHg_kwDHkkxiBE98k8G50zBSLjM6_1PUBEcP2JKKFheYDRKdR2ppk02fjA09SumZi16JxSvrgNYcV-98RjnFyRPuseOlYuxyz4ab7ZfUYMZ4dXHx86UDZ-UkU0zQsvJKvWgZk5smIRMYJ3jbVtXKoX6cRkvTE5XvHklnyQmGmOb6a8uuMYPQhU-KiJSS0mLpefP5ObkJ3rMPphACXgtpYpGYpkxypGGsqV51cAroUuenbsGJy1gyzw-WOPAPlPE7aKCPliDUOYit5zc10BB0uPMsUcNppE9Asc4xLUI_XjFHeKjr [TRUNCATED] Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:06 UTC	2771	OUT	GET /r/BeOVsz0yBniXXqtLdQ61w5EXZs4rlB3bM4hPE0Wclw34aTB6f-aBOLfdYk947YZeV6gy_uoSpN6J1J1wpRLRFlpAHZ9poRTp4_uJCjI_XuPgnMU8jd2y9Mp6nJFhCUjrJ3WWta3Dm9saQFBA5O7c3kgZ9NiOHA0LTYzRubTKuONRhZ2IWtLTUf-pbyvQ3Qn0QBORi72DjeHsM4uz5A-o9lfs2IrhAPhcNK2ZQnjdA_ENQ2QU1VQ7ZIykdCHLuqHrFuHG1NhjjjC7U2Zec_kphRr2fp64xCW1KHxReZAb7g_7X9f-vwuv96_IDQEKqPqFlpe8CEzh4D1iuA9bJ1OIZrUj0yL8UoSKSJB6UCJasLKhlBUWdRA4kpTOhw-aKBTqzk1KkGN_wSOVoDNgS7CISwYjvZLEgY0dYdJzeMEaH5Fzi64eTDGjxUWDd3TVwROYlXpPEyQxvHhiiIWXfC0GrKZgHxQQ2weQpkFXj9rrLj4zWeXdXfSaXuiFHufphGvcpWR-35V8qlqcJQwnPvU-K6959a0FpGLLVumsTJJsdYnRUF3rsvfi8xaPyht5wj__H-SifgXyzczo7Tkk7pZwQmdmoCJZ2IC1Q666pW-b7PHuXmEwgPRx_mBayodRAIyqDpaIuJXT-t8ZarMGPoDB6xnkhk6WSK4zHg_kwDHkkxiBE98k8G50zBSLjM6_1PUBEcP2JKKFheYDRKdR2ppk02fjA09SumZi16JxSvrgNYcV-98RjnFyRPuseOlYuxyz4ab7ZfUYMZ4dXHx86UDZ-UkU0zQsvJKvWgZk5smIRMYJ3jbVtXKoX6cRkvTE5XvHklnyQmGmOb6a8uuMYPQhU-KiJSS0mLpefP5ObkJ3rMPphACXgtpYpGYpkxypGGsqV51cAroUuenbsGJy1gyzw-WOPAPlPE7aKCPliDUOYit5zc10BB0uPMsUcNppE9Asc4xLUI_XjFHeKjrLCOZ1daWO14rNP8JWGK_NlhtrY37QiH272Tyg6P3cK [TRUNCATED] Host: url.us.m.mimecastprotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:06 UTC	413	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 26 Mar 2025 15:21:06 GMT Content-Length: 0 Connection: close Location: https://link.edgepilot.com/s/4ab0affe/qs6FqDZthkO8zPVTOv9Txg?u=https://functionalhealths.com/encore/?id=hh7nhs%26p=mr__cooper_encryption%26c=1 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-control: no-store Pragma: no-cache X-Robots-Tag: noindex, nofollow

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:06 UTC	783	OUT	GET /s/4ab0affe/qs6FqDZthkO8zPVTOv9Txg?u=https://functionalhealths.com/encore/?id=hh7nhs%26p=mr__cooper_encryption%26c=1 HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:07 UTC	184	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Wed, 26 Mar 2025 15:21:07 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2554 Connection: close Cache-Control: no-cache
2025-03-26 15:21:07 UTC	2554	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 65 63 6b 69 6e 67 20 6c 69 6e 6b 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 63 73 73 3f 76 3d 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 Data Ascii: <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>Checking link...</title> <link href="/css/app.css?v=1" rel="stylesheet"> <link href="//maxcdn.bootstrapcdn.com/bootstr

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:07 UTC	672	OUT	GET /css/app.css?v=1 HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://link.edgepilot.com/s/4ab0affe/qs6FqDZthkO8zPVTOv9Txg?u=https://functionalhealths.com/encore/?id=hh7nhs%26p=mr__cooper_encryption%26c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:07 UTC	256	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Wed, 26 Mar 2025 15:21:07 GMT Content-Type: text/css Content-Length: 819 Last-Modified: Wed, 01 Mar 2023 20:35:57 GMT Connection: close ETag: "63ffb72d-333" Cache-Control: max-age Accept-Ranges: bytes
2025-03-26 15:21:07 UTC	819	IN	Data Raw: 6e 61 76 2e 6e 61 76 62 61 72 20 7b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 38 30 70 78 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 20 21 20 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 6e 61 76 2e 6e 61 76 62 61 72 20 3e 20 2a 20 7b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 38 30 70 78 3b 0a 7d 0a 2e 6e 61 76 62 61 72 2d 62 72 61 6e 64 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 30 3b 0a 20 20 Data Ascii: nav.navbar { min-height: 80px ! important; background-color: inherit ! important; border-color: transparent ! important; margin-bottom: 5px ! important;}nav.navbar > * { min-height: 80px;}.navbar-brand { height: 70px; margin: 0 0 0 0;

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:07 UTC	616	OUT	GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive Origin: https://link.edgepilot.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://link.edgepilot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:07 UTC	951	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 15:21:07 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"ec3bb52a00e176a7181d454dffaea219" Last-Modified: Mon, 25 Jan 2021 22:03:59 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 11/04/2024 01:40:00 CDN-EdgeStorageId: 718 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: b2baad94fa4013ec5e2417f12f6a0175 CDN-Cache: HIT CF-Cache-Status: HIT Age: 108734 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9267a2d02fb27b0e-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 15:21:07 UTC	418	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b Data Ascii: 7bf9/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 2c 6e 61 76 2c 73 65 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f Data Ascii: ,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{bo
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 Data Ascii: height:auto}input[type=search]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 Data Ascii: 1px solid #ddd!important}}@font-face{font-family:'Glyphicons Halflings';src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 65 30 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 Data Ascii: e010"}.glyphicon-th:before{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphi
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 Data Ascii: on-bookmark:before{content:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-heig
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 68 69 63 6f 6e 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: hicon-step-forward:before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{conte
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: }.glyphicon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{conte
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f Data Ascii: d:before{content:"\e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:befo
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 Data Ascii: e{content:"\e173"}.glyphicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphic

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	21205
Entropy (8bit):	4.539956175421109
Encrypted:	false
SSDEEP:	384:ms0Cn6th+qwEmUT4bTR+UZacnp6FCYIEyW54AqwEmpbXJBbl2np266gIaq:ht6t8qwEmUTuTR+UZacnpD5PAqwEmZJz
MD5:	12E999F4179F45185AC5B3BA23D5C56A
SHA1:	C5F45A9A64CA91F9D0D7DF7DEF7DD1CF5E6753BE
SHA-256:	DA698EF6B92A246389EB1B89163A8BA111CE141F4056FA302F19E03B3BDFF179
SHA-512:	EB4DD31A442CC00C731C46F61987CF58C3BE5F22456E0B907016D284E3A69D618B997E6DE95819B5BB051FD3EF5BCAA526D829BCFAED838235814315085F79CE
Malicious:	false
Reputation:	low
URL:	https://functionalhealths.com/encore/plugins/page_notes/page_notes.js
Preview:	.// use this to isolate the scope.(function () {. // No notes shown specified by generation config. if (!$axure.document.configuration.showPageNotes && !$axure.document.configuration.showAnnotationsSidebar && !$axure.document.configuration.showAnnotations) { return; }.. $(window.document).ready(function () {. // Load right panel for Page Notes. if ($axure.document.configuration.showPageNotes \|\| $axure.document.configuration.showAnnotationsSidebar) {. $axure.player.createPluginHost({. id: 'pageNotesHost',. context: 'inspect',. title: 'Notes',. gid: 2,. });. }.. // Load footnotes on widgets. if ($axure.document.configuration.showAnnotations) {. $('#overflowMenuContainer').prepend('<div id="showNotesOption" class="showOption" style="order: 3"><div class="overflowOptionCheckbox"></div>Show note markers</div>');. }.. createNotesOverlay();.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	18280
Entropy (8bit):	4.514304968216952
Encrypted:	false
SSDEEP:	384:14uo3U5Pd7irK7AxhIl045vZeAJVOKpJhJRz9fWz:mb3A7i+AxhIReORHfi
MD5:	64250DDABC4EEB0EC20DDAB80AED8CF8
SHA1:	BE5457FEF7A4B03D630095EC3FE4B710E4105EFD
SHA-256:	5296F4C27AC12E5372962D8C0AB59042B559291D9CE08E60691C517C4FD36383
SHA-512:	5E5E6A4F7B001E51F74499AB67C4F5BEBB4EAE6ABDD68AC02D081E6F2A7C808E4931A8476AF06C280985A7EC20D07E6695B50DC5F17C38F6D3BDDEF30C9E7026
Malicious:	false
Reputation:	low
URL:	https://functionalhealths.com/encore/resources/scripts/axure/axQuery.js
Preview:	.$axure = function(query) {. return $axure.query(query);.};. .// ***** AxQuery and Page metadata ****** //.(function() {. var $ax = function() {. var returnVal = $axure.apply(this, arguments);. var axFn = $ax.fn;. for (var key in axFn) {. returnVal[key] = axFn[key];. }.. return returnVal;. };.. $ax.public = $axure;. $ax.fn = {};.. $axure.internal = function(initFunction) {. //Attach messagecenter to $ax object so that it can be used in viewer.js, etc in internal scope. if(!$ax.messageCenter) $ax.messageCenter = $axure.messageCenter;.. return initFunction($ax);. };. . var _lastFiredResize = 0; . var _resizeFunctions = []; . var _lastTimeout;. var _fireResize = function() {. if (_lastTimeout) window.clearTimeout(_lastTimeout); . _lastTimeout = undefined;. _lastFiredResize = new Date().getTime(); . for(var i = 0; i < _resizeFunctions.length; i++) _resizeFu

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:07 UTC	600	OUT	GET /bootstrap/3.3.7/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive Origin: https://link.edgepilot.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://link.edgepilot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:07 UTC	966	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 15:21:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"5869c96cc8f19086aee625d670d741f9" Last-Modified: Mon, 25 Jan 2021 22:04:00 GMT CDN-CachedAt: 10/09/2024 17:15:56 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1109 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 9e732be3c2ec20ce5b8eb7cc64a6cec7 CDN-Cache: HIT CF-Cache-Status: HIT Age: 105750 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9267a2d02d2b5612-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 15:21:07 UTC	403	IN	Data Raw: 37 62 65 62 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 62 3d 61 2e 66 6e Data Ascii: 7beb/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");+function(a){"use strict";var b=a.fn
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 20 31 2e 39 2e 31 20 6f 72 20 68 69 67 68 65 72 2c 20 62 75 74 20 6c 6f 77 65 72 20 74 68 61 6e 20 76 65 72 73 69 6f 6e 20 34 22 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e Data Ascii: 1.9.1 or higher, but lower than version 4")}(jQuery),+function(a){"use strict";function b(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",tran
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 67 67 65 72 28 62 3d 61 2e 45 76 65 6e 74 28 22 63 6c 6f 73 65 2e 62 73 2e 61 6c 65 72 74 22 29 29 2c 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 7c 7c 28 67 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 22 29 2c 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 67 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 67 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 63 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 64 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 3a 63 28 29 29 7d 3b 76 61 72 20 65 3d 61 2e 66 6e 2e 61 6c 65 72 74 3b 61 2e 66 6e 2e 61 6c 65 72 74 3d 62 2c 61 2e 66 6e 2e 61 6c 65 72 74 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 64 2c 61 2e 66 Data Ascii: gger(b=a.Event("close.bs.alert")),b.isDefaultPrevented()\|\|(g.removeClass("in"),a.support.transition&&g.hasClass("fade")?g.one("bsTransitionEnd",c).emulateTransitionEnd(d.TRANSITION_DURATION):c())};var e=a.fn.alert;a.fn.alert=b,a.fn.alert.Constructor=d,a.f
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 3a 22 63 68 65 63 6b 62 6f 78 22 3d 3d 63 2e 70 72 6f 70 28 22 74 79 70 65 22 29 26 26 28 63 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 29 21 3d 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 26 26 28 61 3d 21 31 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 2c 63 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 29 2c 61 26 26 63 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 65 6c 73 65 20 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 61 Data Ascii: element.addClass("active")):"checkbox"==c.prop("type")&&(c.prop("checked")!==this.$element.hasClass("active")&&(a=!1),this.$element.toggleClass("active")),c.prop("checked",this.$element.hasClass("active")),a&&c.trigger("change")}else this.$element.attr("a
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 70 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 61 63 74 69 76 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 24 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6b 65 79 62 6f 61 72 64 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 6b 65 79 64 6f 77 6e 2c 74 68 69 73 29 29 2c 22 68 6f 76 65 72 22 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 75 73 65 26 26 21 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: options=c,this.paused=null,this.sliding=null,this.interval=null,this.$active=null,this.$items=null,this.options.keyboard&&this.$element.on("keydown.bs.carousel",a.proxy(this.keydown,this)),"hover"==this.options.pause&&!("ontouchstart"in document.documentE
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 61 3c 30 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6c 69 64 69 6e 67 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 73 6c 69 64 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 74 6f 28 61 29 7d 29 3a 63 3d 3d 61 3f 74 68 69 73 2e 70 61 75 73 65 28 29 2e 63 79 63 6c 65 28 29 3a 74 68 69 73 2e 73 6c 69 64 65 28 61 3e 63 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 74 68 69 73 2e 24 69 74 65 6d 73 2e 65 71 28 61 29 29 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7c 7c 28 74 68 69 73 2e 70 61 75 73 65 64 3d 21 30 29 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 6e 65 78 Data Ascii: items.length-1\|\|a<0))return this.sliding?this.$element.one("slid.bs.carousel",function(){b.to(a)}):c==a?this.pause().cycle():this.slide(a>c?"next":"prev",this.$items.eq(a))},c.prototype.pause=function(b){return b\|\|(this.paused=!0),this.$element.find(".nex
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 63 74 69 76 65 22 2c 68 5d 2e 6a 6f 69 6e 28 22 20 22 29 29 2c 69 2e 73 6c 69 64 69 6e 67 3d 21 31 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 6d 29 7d 2c 30 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 63 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 4f 4e 29 29 3a 28 65 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 66 2e 61 64 64 43 6c 61 73 73 28 22 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 6c 69 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 6d 29 29 2c 67 26 26 74 68 69 73 2e 63 79 63 6c 65 28 29 2c 74 68 69 73 7d 7d 3b 76 61 72 20 64 3d 61 2e 66 6e 2e 63 61 72 6f Data Ascii: ctive",h].join(" ")),i.sliding=!1,setTimeout(function(){i.$element.trigger(m)},0)}).emulateTransitionEnd(c.TRANSITION_DURATION)):(e.removeClass("active"),f.addClass("active"),this.sliding=!1,this.$element.trigger(m)),g&&this.cycle(),this}};var d=a.fn.caro
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 67 65 72 3d 61 28 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 68 72 65 66 3d 22 23 27 2b 62 2e 69 64 2b 27 22 5d 2c 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 63 6f 6c 6c 61 70 73 65 22 5d 5b 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 27 2b 62 2e 69 64 2b 27 22 5d 27 29 2c 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 70 61 72 65 6e 74 3f 74 68 69 73 2e 24 70 61 72 65 6e 74 3d 74 68 69 73 2e 67 65 74 50 61 72 65 6e 74 28 29 3a 74 68 69 73 2e 61 64 64 41 72 69 61 41 6e 64 43 6f 6c 6c 61 70 73 65 64 43 6c 61 73 73 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 24 74 72 69 67 67 65 72 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 74 6f 67 67 6c 65 26 Data Ascii: ger=a('[data-toggle="collapse"][href="#'+b.id+'"],[data-toggle="collapse"][data-target="#'+b.id+'"]'),this.transitioning=null,this.options.parent?this.$parent=this.getParent():this.addAriaAndCollapsedClass(this.$element,this.$trigger),this.options.toggle&
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 5b 30 5d 5b 69 5d 29 7d 7d 7d 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 68 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 74 72 61 6e 73 69 74 69 6f 6e 69 6e 67 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 69 6e 22 29 29 7b 76 61 72 20 62 3d 61 2e 45 76 65 6e 74 28 22 68 69 64 65 2e 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 62 29 2c 21 62 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 7b 76 61 72 20 63 3d 74 68 69 73 2e 64 69 6d 65 6e 73 69 6f 6e 28 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 63 5d 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 5b 63 5d 28 29 29 5b 30 5d 2e 6f 66 66 73 65 74 48 65 69 67 68 Data Ascii: [0][i])}}}},d.prototype.hide=function(){if(!this.transitioning&&this.$element.hasClass("in")){var b=a.Event("hide.bs.collapse");if(this.$element.trigger(b),!b.isDefaultPrevented()){var c=this.dimension();this.$element[c](this.$element[c]())[0].offsetHeigh
2025-03-26 15:21:07 UTC	1369	IN	Data Raw: 22 5d 27 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 61 28 74 68 69 73 29 3b 65 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 7c 7c 64 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 66 3d 62 28 65 29 2c 67 3d 66 2e 64 61 74 61 28 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 2c 68 3d 67 3f 22 74 6f 67 67 6c 65 22 3a 65 2e 64 61 74 61 28 29 3b 63 2e 63 61 6c 6c 28 66 2c 68 29 7d 29 7d 28 6a 51 75 65 72 79 29 2c 2b 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 63 3d 62 2e 61 74 74 72 28 22 64 61 74 61 2d 74 61 72 67 65 74 22 29 3b 63 7c 7c 28 63 3d 62 2e 61 74 74 72 28 22 68 72 65 66 22 29 2c 63 3d 63 26 26 2f 23 5b 41 2d 5a 61 2d 7a Data Ascii: "]',function(d){var e=a(this);e.attr("data-target")\|\|d.preventDefault();var f=b(e),g=f.data("bs.collapse"),h=g?"toggle":e.data();c.call(f,h)})}(jQuery),+function(a){"use strict";function b(b){var c=b.attr("data-target");c\|\|(c=b.attr("href"),c=c&&/#[A-Za-z

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:07 UTC	576	OUT	GET /jquery-3.2.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://link.edgepilot.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://link.edgepilot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:07 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86659 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15283" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1921695 Date: Wed, 26 Mar 2025 15:21:07 GMT X-Served-By: cache-lga21971-LGA, cache-nyc-kteb1890023-NYC X-Cache: HIT, HIT X-Cache-Hits: 391, 0 X-Timer: S1743002468.825704,VS0,VE1 Vary: Accept-Encoding
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: rn this.pushStack(c>=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 73 2c 22 22 29 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 77 28 4f 62 6a 65 63 74 28 61 29 29 3f Data Ascii: c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").replace(s,"")},makeArray:function(a,b){var c=b\|\|[];return null!=a&&(w(Object(a))?
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e 70 75 73 68 2c 47 3d 44 2e 70 75 73 68 2c 48 3d 44 2e 73 6c 69 63 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 61 5b 63 5d 3d 3d 3d Data Ascii: ,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.push,G=D.push,H=D.slice,I=function(a,b){for(var c=0,d=a.length;c<d;c++)if(a[c]===
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 2d 66 5d 7b 31 2c 36 7d 22 2b 4b 2b 22 3f 7c 28 22 2b 4b 2b 22 29 7c 2e 29 22 2c 22 69 67 22 29 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d Data Ascii: +"\\)\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da-f]{1,6}"+K+"?\|("+K+")\|.)","ig"),aa=function(a,b,c){var d="0x"+b-65536;return d!=
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 6b 3d 75 29 2c 6f 3d 67 28 61 29 2c 68 3d 6f 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 68 2d 2d 29 6f 5b 68 5d 3d 22 23 22 2b 6b 2b 22 20 22 2b 73 61 28 6f 5b 68 5d 29 3b 72 3d 6f 2e 6a 6f 69 6e 28 Data Ascii: ementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.setAttribute("id",k=u),o=g(a),h=o.length;while(h--)o[h]="#"+k+" "+sa(o[h]);r=o.join(
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 5d 3d 63 5b 65 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 Data Ascii: sabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function qa(a){return a&&"undefined"!=typeof a.getElementsByTagName&
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 61 29 72 65 74 75 72 6e 5b 66 5d 3b 65 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 61 29 2c 64 3d 30 3b 77 68 69 6c 65 28 66 3d 65 5b 64 2b 2b 5d 29 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 Data Ascii: d");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value===a)return[f];e=b.getElementsByName(a),d=0;while(f=e[d++])if(c=f.getAttributeNod
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 64 69 Data Ascii: eElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.querySelectorAll(":enabled").length&&q.push(":enabled",":disabled"),o.appendChild(a).di
2025-03-26 15:21:07 UTC	1378	IN	Data Raw: 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 67 5b 64 5d 3d 3d 3d 68 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6c 61 28 Data Ascii: l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?la(

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:08 UTC	714	OUT	GET /favicon.ico HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://link.edgepilot.com/s/4ab0affe/qs6FqDZthkO8zPVTOv9Txg?u=https://functionalhealths.com/encore/?id=hh7nhs%26p=mr__cooper_encryption%26c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:08 UTC	184	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Wed, 26 Mar 2025 15:21:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1310 Connection: close Cache-Control: no-cache
2025-03-26 15:21:08 UTC	1310	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 63 73 73 3f 76 3d 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f Data Ascii: <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>404 - page not found</title> <link href="/css/app.css?v=1" rel="stylesheet"> <link href="//maxcdn.bootstrapcdn.com/boo

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:08 UTC	393	OUT	GET /favicon.ico HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:09 UTC	184	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Wed, 26 Mar 2025 15:21:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1310 Connection: close Cache-Control: no-cache
2025-03-26 15:21:09 UTC	1310	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 34 30 34 20 2d 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 73 73 2f 61 70 70 2e 63 73 73 3f 76 3d 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f Data Ascii: <html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1" /> <title>404 - page not found</title> <link href="/css/app.css?v=1" rel="stylesheet"> <link href="//maxcdn.bootstrapcdn.com/boo

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:09 UTC	947	OUT	POST /filter HTTP/1.1 Host: link.edgepilot.com Connection: keep-alive Content-Length: 313 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://link.edgepilot.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://link.edgepilot.com/s/4ab0affe/qs6FqDZthkO8zPVTOv9Txg?u=https://functionalhealths.com/encore/?id=hh7nhs%26p=mr__cooper_encryption%26c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:09 UTC	313	OUT	Data Raw: 64 69 67 65 73 74 3d 34 61 62 30 61 66 66 65 26 69 64 3d 71 73 36 46 71 44 5a 74 68 6b 4f 38 7a 50 56 54 4f 76 39 54 78 67 26 78 66 77 64 3d 34 35 2e 39 32 2e 32 32 39 2e 31 33 38 26 75 61 67 65 6e 74 3d 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 25 32 38 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 25 32 39 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 25 32 38 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 25 32 39 2b 43 68 72 6f 6d 65 25 32 46 31 33 34 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 26 70 61 74 68 3d 73 26 75 72 6c 3d 61 48 52 30 63 48 4d 36 4c 79 39 6d 64 57 35 6a 64 47 6c 76 62 6d 46 73 61 47 56 68 62 48 52 6f 63 79 35 6a 62 32 30 76 5a 57 Data Ascii: digest=4ab0affe&id=qs6FqDZthkO8zPVTOv9Txg&xfwd=45.92.229.138&uagent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F134.0.0.0+Safari%2F537.36&path=s&url=aHR0cHM6Ly9mdW5jdGlvbmFsaGVhbHRocy5jb20vZW
2025-03-26 15:21:09 UTC	240	IN	HTTP/1.1 302 Found Server: nginx/1.14.1 Date: Wed, 26 Mar 2025 15:21:09 GMT Transfer-Encoding: chunked Connection: close Location: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Cache-Control: no-cache
2025-03-26 15:21:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:09 UTC	766	OUT	GET /encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 HTTP/1.1 Host: functionalhealths.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://link.edgepilot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:10 UTC	368	IN	HTTP/1.1 200 OK Connection: close content-type: text/html last-modified: Wed, 13 Nov 2024 01:07:11 GMT accept-ranges: bytes content-length: 6841 date: Wed, 26 Mar 2025 15:21:10 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:10 UTC	6841	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 74 69 74 6c 65 64 20 44 6f 63 75 6d 65 6e 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"><head> <title>Untitled Document</title> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta http-equiv="content-type" content="text/html; charset=utf

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:10 UTC	623	OUT	GET /encore/resources/css/reset.css HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	445	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:10 GMT content-type: text/css last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 479 date: Wed, 26 Mar 2025 15:21:10 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	479	IN	Data Raw: ef bb bf 68 74 6d 6c 2c 62 6f 64 79 2c 64 69 76 2c 73 70 61 6e 2c 0a 61 70 70 6c 65 74 2c 6f 62 6a 65 63 74 2c 69 66 72 61 6d 65 2c 0a 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 0a 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 62 69 67 2c 63 69 74 65 2c 63 6f 64 65 2c 0a 64 65 6c 2c 64 66 6e 2c 65 6d 2c 66 6f 6e 74 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 71 2c 73 2c 73 61 6d 70 2c 0a 73 6d 61 6c 6c 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 0a 64 64 2c 64 6c 2c 64 74 2c 6c 69 2c 6f 6c 2c 75 6c 2c 0a 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 0a 74 61 62 6c 65 2c 63 61 70 74 69 6f 6e 2c 74 Data Ascii: html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,font,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,dd,dl,dt,li,ol,ul,fieldset,form,label,legend,table,caption,t

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:10 UTC	625	OUT	GET /encore/resources/css/default.css HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	447	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:11 GMT content-type: text/css last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 21204 date: Wed, 26 Mar 2025 15:21:11 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: ef bb bf 62 6f 64 79 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 49 6e 74 65 72 27 2c 20 75 69 2d 73 61 6e 73 2d 73 65 72 69 66 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 20 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 65 32 39 33 62 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 20 20 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 20 6f 70 74 Data Ascii: body { font-family: 'Inter', ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", Segoe UI Symbol, "Noto Color Emoji"; font-size: 14px; color: #1e293b; -webkit-font-smoothing: antialiased; text-rendering: opt
2025-03-26 15:21:11 UTC	4820	IN	Data Raw: 72 2d 62 6f 74 74 6f 6d 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 45 32 45 38 46 30 3b 0a 20 20 20 20 2f 2a 6f 70 61 63 69 74 79 3a 20 2e 35 3b 2a 2f 0a 7d 0a 0a 2e 70 6c 75 67 69 6e 4e 61 6d 65 48 65 61 64 65 72 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 66 6c 65 78 3a 20 31 3b 0a 7d 0a 0a 2e 6d 6f 62 69 6c 65 4d 6f 64 65 20 2e 70 6c 75 67 69 6e 4e 61 6d 65 48 65 61 64 65 72 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 34 70 78 20 31 32 70 78 20 31 33 70 78 20 31 32 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 2f 2a 63 6f 6c 6f 72 3a 20 23 36 64 36 64 36 64 3b 2a 2f 0a 7d 0a 0a 23 70 72 6f 6a 65 63 74 4f 70 Data Ascii: r-bottom: solid 1px #E2E8F0; /opacity: .5;/}.pluginNameHeader { font-size: 14px; font-weight: 500; flex: 1;}.mobileMode .pluginNameHeader { margin: 14px 12px 13px 12px; font-size: 18px; /color: #6d6d6d;/}#projectOp

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:10 UTC	623	OUT	GET /encore/resources/scripts/jquery-3.7.1.min.js HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	462	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:11 GMT content-type: application/javascript last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 377845 date: Wed, 26 Mar 2025 15:21:11 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 5d 7d 29 2c 6c 61 73 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 5b 74 2d 31 5d 7d 29 2c 65 71 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 5b 6e 3c 30 3f 6e 2b 74 3a 6e 5d 7d 29 2c 65 76 65 6e 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6f 64 64 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 74 3b 6e 2b 3d 32 29 65 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 6c 74 3a 58 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 66 6f 72 28 72 3d 6e 3c 30 3f 6e 2b 74 3a 74 3c 6e 3f 74 3a 6e 3b 30 Data Ascii: ]}),last:X(function(e,t){return[t-1]}),eq:X(function(e,t,n){return[n<0?n+t:n]}),even:X(function(e,t){for(var n=0;n<t;n+=2)e.push(n);return e}),odd:X(function(e,t){for(var n=1;n<t;n+=2)e.push(n);return e}),lt:X(function(e,t,n){var r;for(r=n<0?n+t:t<n?t:n;0
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 74 68 69 73 2c 74 2c 6e 29 3b 63 65 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 2c 22 66 78 22 3d 3d 3d 74 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 65 5b 30 5d 26 26 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 74 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 65 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 31 2c 69 3d 63 65 2e 44 65 66 65 72 72 65 64 Data Ascii: this,t,n);ce._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&ce.dequeue(this,t)})},dequeue:function(e){return this.each(function(){ce.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(e,t){var n,r=1,i=ce.Deferred
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 29 7b 63 65 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 5b 5d 2c 72 3d 63 65 28 65 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 2d 31 2c 6f 3d 30 3b 6f 3c 3d 69 3b 6f 2b 2b 29 74 3d 6f 3d 3d 3d 69 3f 74 68 69 73 3a 74 68 69 73 2e 63 6c 6f 6e 65 28 21 30 29 2c 63 65 28 72 5b 6f 5d 29 5b 61 5d 28 74 29 2c 73 2e 61 70 70 6c 79 28 6e 2c 74 2e 67 65 74 28 29 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 29 7d 7d 29 3b 76 61 72 20 5f 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 47 2b 22 29 28 3f 21 70 78 29 5b 61 2d 7a 25 5d 2b 24 22 2c 22 69 22 29 2c 7a 65 3d 2f 5e 2d 2d 2f 2c 58 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 Data Ascii: ){ce.fn[e]=function(e){for(var t,n=[],r=ce(e),i=r.length-1,o=0;o<=i;o++)t=o===i?this:this.clone(!0),ce(r[o])[a](t),s.apply(n,t.get());return this.pushStack(n)}});var _e=new RegExp("^("+G+")(?!px)[a-z%]+$","i"),ze=/^--/,Xe=function(e){var t=e.ownerDocument
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 6f 70 46 69 78 3a 7b 22 66 6f 72 22 3a 22 68 74 6d 6c 46 6f 72 22 2c 22 63 6c 61 73 73 22 3a 22 63 6c 61 73 73 4e 61 6d 65 22 7d 7d 29 2c 6c 65 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 63 65 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 Data Ascii: opFix:{"for":"htmlFor","class":"className"}}),le.optSelected\|\|(ce.propHooks.selected={get:function(e){var t=e.parentNode;return t&&t.parentNode&&t.parentNode.selectedIndex,null},set:function(e){var t=e.parentNode;t&&(t.selectedIndex,t.parentNode&&t.parent
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 72 3d 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 76 28 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 65 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 61 3f 65 5b 61 5d 3d 65 5b 61 5d 2e 72 65 70 6c 61 63 65 28 5a 74 2c 22 24 31 22 2b 72 29 3a 21 31 21 3d 3d 65 2e 6a 73 6f 6e 70 26 26 28 65 2e 75 72 6c 2b 3d 28 41 74 2e 74 65 73 74 28 65 2e 75 72 6c 29 3f 22 26 22 3a 22 3f 22 29 2b 65 2e 6a 73 6f 6e 70 2b 22 3d 22 2b 72 29 2c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 22 73 63 72 69 70 74 20 6a 73 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7c 7c 63 65 2e 65 72 72 6f 72 28 72 2b 22 20 77 61 73 20 6e 6f 74 20 63 Data Ascii: dataTypes[0])return r=e.jsonpCallback=v(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Zt,"$1"+r):!1!==e.jsonp&&(e.url+=(At.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o\|\|ce.error(r+" was not c
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 20 6c 2c 20 68 2c 20 63 2c 20 75 2c 20 43 3b 20 56 2e 77 69 64 67 65 74 3b 20 66 75 6e 63 74 69 6f 6e 20 44 28 74 2c 20 65 2c 20 69 29 20 7b 20 72 65 74 75 72 6e 20 5b 70 61 72 73 65 46 6c 6f 61 74 28 74 5b 30 5d 29 20 2a 20 28 75 2e 74 65 73 74 28 74 5b 30 5d 29 20 3f 20 65 20 2f 20 31 30 30 20 3a 20 31 29 2c 20 70 61 72 73 65 46 6c 6f 61 74 28 74 5b 31 5d 29 20 2a 20 28 75 2e 74 65 73 74 28 74 5b 31 5d 29 20 3f 20 69 20 2f 20 31 30 30 20 3a 20 31 29 5d 20 7d 20 66 75 6e 63 74 69 6f 6e 20 49 28 74 2c 20 65 29 20 7b 20 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 56 2e 63 73 73 28 74 2c 20 65 29 2c 20 31 30 29 20 7c 7c 20 30 20 7d 20 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 20 7b 20 72 65 74 75 72 6e 20 6e 75 6c 6c 20 21 3d 20 74 20 26 26 20 74 20 3d 3d Data Ascii: l, h, c, u, C; V.widget; function D(t, e, i) { return [parseFloat(t[0]) * (u.test(t[0]) ? e / 100 : 1), parseFloat(t[1]) * (u.test(t[1]) ? i / 100 : 1)] } function I(t, e) { return parseInt(V.css(t, e), 10) \|\| 0 } function T(t) { return null != t && t ==
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 3d 20 65 2c 20 69 20 3d 20 6e 75 6c 6c 2c 20 65 20 3d 20 7b 7d 29 2c 20 22 6e 75 6d 62 65 72 22 20 21 3d 20 74 79 70 65 6f 66 20 65 20 26 26 20 21 56 2e 66 78 2e 73 70 65 65 64 73 5b 65 5d 20 7c 7c 20 28 73 20 3d 20 69 2c 20 69 20 3d 20 65 2c 20 65 20 3d 20 7b 7d 29 2c 20 22 66 75 6e 63 74 69 6f 6e 22 20 3d 3d 20 74 79 70 65 6f 66 20 69 20 26 26 20 28 73 20 3d 20 69 2c 20 69 20 3d 20 6e 75 6c 6c 29 2c 20 65 20 26 26 20 56 2e 65 78 74 65 6e 64 28 74 2c 20 65 29 2c 20 69 20 3d 20 69 20 7c 7c 20 65 2e 64 75 72 61 74 69 6f 6e 2c 20 74 2e 64 75 72 61 74 69 6f 6e 20 3d 20 56 2e 66 78 2e 6f 66 66 20 3f 20 30 20 3a 20 22 6e 75 6d 62 65 72 22 20 3d 3d 20 74 79 70 65 6f 66 20 69 20 3f 20 69 20 3a 20 69 20 69 6e 20 56 2e 66 78 2e 73 70 65 65 64 73 20 3f 20 56 2e 66 Data Ascii: = e, i = null, e = {}), "number" != typeof e && !V.fx.speeds[e] \|\| (s = i, i = e, e = {}), "function" == typeof i && (s = i, i = null), e && V.extend(t, e), i = i \|\| e.duration, t.duration = V.fx.off ? 0 : "number" == typeof i ? i : i in V.fx.speeds ? V.f
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 69 74 69 6f 6e 22 29 2c 20 64 20 3d 20 69 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 20 70 20 3d 20 56 2e 65 66 66 65 63 74 73 2e 73 63 61 6c 65 64 44 69 6d 65 6e 73 69 6f 6e 73 28 69 29 2c 20 66 20 3d 20 73 2e 66 72 6f 6d 20 7c 7c 20 70 2c 20 67 20 3d 20 73 2e 74 6f 20 7c 7c 20 56 2e 65 66 66 65 63 74 73 2e 73 63 61 6c 65 64 44 69 6d 65 6e 73 69 6f 6e 73 28 69 2c 20 30 29 3b 20 56 2e 65 66 66 65 63 74 73 2e 63 72 65 61 74 65 50 6c 61 63 65 68 6f 6c 64 65 72 28 69 29 2c 20 22 73 68 6f 77 22 20 3d 3d 3d 20 72 20 26 26 20 28 72 20 3d 20 66 2c 20 66 20 3d 20 67 2c 20 67 20 3d 20 72 29 2c 20 6e 20 3d 20 7b 20 66 72 6f 6d 3a 20 7b 20 79 3a 20 66 2e 68 65 69 67 68 74 20 2f 20 70 2e 68 65 69 67 68 74 2c 20 78 3a 20 66 2e 77 69 64 74 68 20 2f 20 70 2e 77 69 64 74 68 20 Data Ascii: ition"), d = i.position(), p = V.effects.scaledDimensions(i), f = s.from \|\| p, g = s.to \|\| V.effects.scaledDimensions(i, 0); V.effects.createPlaceholder(i), "show" === r && (r = f, f = g, g = r), n = { from: { y: f.height / p.height, x: f.width / p.width
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 65 6e 22 2c 20 22 66 61 6c 73 65 22 29 2e 70 72 65 76 28 29 2e 61 74 74 72 28 7b 20 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 3a 20 22 74 72 75 65 22 2c 20 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 3a 20 22 74 72 75 65 22 2c 20 74 61 62 49 6e 64 65 78 3a 20 30 20 7d 29 20 7d 2c 20 5f 61 6e 69 6d 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 74 2c 20 69 2c 20 65 29 20 7b 20 76 61 72 20 73 2c 20 6e 2c 20 6f 2c 20 61 20 3d 20 74 68 69 73 2c 20 72 20 3d 20 30 2c 20 6c 20 3d 20 74 2e 63 73 73 28 22 62 6f 78 2d 73 69 7a 69 6e 67 22 29 2c 20 68 20 3d 20 74 2e 6c 65 6e 67 74 68 20 26 26 20 28 21 69 2e 6c 65 6e 67 74 68 20 7c 7c 20 74 2e 69 6e 64 65 78 28 29 20 3c 20 69 2e 69 6e 64 65 78 28 29 29 2c 20 63 20 3d 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6e Data Ascii: en", "false").prev().attr({ "aria-selected": "true", "aria-expanded": "true", tabIndex: 0 }) }, _animate: function (t, i, e) { var s, n, o, a = this, r = 0, l = t.css("box-sizing"), h = t.length && (!i.length \|\| t.index() < i.index()), c = this.options.an

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:10 UTC	634	OUT	GET /encore/resources/scripts/axure/jquery.nicescroll.min.js HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	461	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:10 GMT content-type: application/javascript last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 60189 date: Wed, 26 Mar 2025 15:21:10 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 2f 2a 20 4d 4f 44 49 46 49 45 44 20 2a 2f 0a 2f 2a 20 6a 71 75 65 72 79 2e 6e 69 63 65 73 63 72 6f 6c 6c 20 76 33 2e 37 2e 36 20 49 6e 75 59 61 6b 73 61 20 2d 20 4d 49 54 20 2d 20 68 74 74 70 73 3a 2f 2f 6e 69 63 65 73 63 72 6f 6c 6c 2e 61 72 65 61 61 70 65 72 74 61 2e 63 6f 6d 20 2a 2f 0a 2f 2a 20 77 69 74 68 20 61 70 70 6c 69 65 64 20 50 52 20 66 6f 72 20 66 69 78 20 43 68 72 6f 6d 65 20 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 20 69 6e 73 69 64 65 20 70 61 73 73 69 76 65 20 65 76 65 6e 74 20 6c 69 73 74 65 6e 65 72 20 2d 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 69 6e 75 79 61 6b 73 61 2f 6a 71 75 65 72 79 2e 6e 69 63 65 73 63 72 6f 6c 6c 2f 70 75 6c 6c 2f 38 30 32 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 Data Ascii: /* MODIFIED // jquery.nicescroll v3.7.6 InuYaksa - MIT - https://nicescroll.areaaperta.com // with applied PR for fix Chrome preventDefault inside passive event listener - https://github.com/inuyaksa/jquery.nicescroll/pull/802 */!function(e){"funct
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 22 5d 3d 22 6e 6f 6e 65 22 29 2c 54 2e 69 73 68 77 73 63 72 6f 6c 6c 26 26 28 74 68 69 73 2e 64 6f 63 2e 63 73 73 28 50 2e 74 72 61 6e 73 69 74 69 6f 6e 73 74 79 6c 65 2c 50 2e 70 72 65 66 69 78 73 74 79 6c 65 2b 22 74 72 61 6e 73 66 6f 72 6d 20 30 6d 73 20 65 61 73 65 2d 6f 75 74 22 29 2c 50 2e 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 26 26 54 2e 62 69 6e 64 28 54 2e 64 6f 63 2c 50 2e 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 2c 54 2e 6f 6e 53 63 72 6f 6c 6c 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 2c 21 31 29 29 2c 54 2e 7a 69 6e 64 65 78 3d 22 61 75 74 6f 22 2c 54 2e 69 73 70 61 67 65 7c 7c 22 61 75 74 6f 22 21 3d 4d 2e 7a 69 6e 64 65 78 3f 54 2e 7a 69 6e 64 65 78 3d 4d 2e 7a 69 6e 64 65 78 3a 54 2e 7a 69 6e 64 65 78 3d Data Ascii: verflow-style"]="none"),T.ishwscroll&&(this.doc.css(P.transitionstyle,P.prefixstyle+"transform 0ms ease-out"),P.transitionend&&T.bind(T.doc,P.transitionend,T.onScrollTransitionEnd,!1)),T.zindex="auto",T.ispage\|\|"auto"!=M.zindex?T.zindex=M.zindex:T.zindex=
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: 6f 6e 73 65 6c 65 63 74 69 6f 6e 65 6e 64 29 2c 54 2e 63 75 72 73 6f 72 68 26 26 54 2e 62 69 6e 64 28 54 2e 63 75 72 73 6f 72 68 2c 22 6d 6f 75 73 65 75 70 22 2c 54 2e 6f 6e 73 65 6c 65 63 74 69 6f 6e 65 6e 64 29 2c 54 2e 62 69 6e 64 28 6c 2c 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 54 2e 6f 6e 73 65 6c 65 63 74 69 6f 6e 64 72 61 67 29 29 2c 54 2e 7a 6f 6f 6d 26 26 28 54 2e 6a 71 62 69 6e 64 28 54 2e 7a 6f 6f 6d 2c 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 54 2e 63 61 6e 73 68 6f 77 6f 6e 6d 6f 75 73 65 65 76 65 6e 74 26 26 54 2e 73 68 6f 77 43 75 72 73 6f 72 28 29 2c 54 2e 72 61 69 6c 2e 61 63 74 69 76 65 3d 21 30 7d 29 2c 54 2e 6a 71 62 69 6e 64 28 54 2e 7a 6f 6f 6d 2c 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 66 75 6e 63 74 69 6f Data Ascii: onselectionend),T.cursorh&&T.bind(T.cursorh,"mouseup",T.onselectionend),T.bind(l,"mousemove",T.onselectiondrag)),T.zoom&&(T.jqbind(T.zoom,"mouseenter",function(){T.canshowonmouseevent&&T.showCursor(),T.rail.active=!0}),T.jqbind(T.zoom,"mouseleave",functio
2025-03-26 15:21:11 UTC	11037	IN	Data Raw: 6e 20 38 30 2b 65 2f 37 32 2a 4d 2e 73 63 72 6f 6c 6c 73 70 65 65 64 7c 30 7d 2c 4d 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 29 69 66 28 54 2e 69 73 68 77 73 63 72 6f 6c 6c 26 26 50 2e 68 61 73 74 72 61 6e 73 69 74 69 6f 6e 26 26 4d 2e 75 73 65 74 72 61 6e 73 69 74 69 6f 6e 26 26 4d 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 29 7b 76 61 72 20 6a 3d 22 22 3b 74 68 69 73 2e 72 65 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 3d 22 22 2c 54 2e 64 6f 63 2e 63 73 73 28 50 2e 70 72 65 66 69 78 73 74 79 6c 65 2b 22 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 2c 22 30 6d 73 22 29 7d 2c 74 68 69 73 2e 70 72 65 70 61 72 65 54 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 74 3d 6f 3f 65 Data Ascii: n 80+e/72*M.scrollspeed\|0},M.smoothscroll)if(T.ishwscroll&&P.hastransition&&M.usetransition&&M.smoothscroll){var j="";this.resetTransition=function(){j="",T.doc.css(P.prefixstyle+"transition-duration","0ms")},this.prepareTransition=function(e,o){var t=o?e

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Windows Analysis Report
https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:10 UTC	614	OUT	GET /encore/resources/scripts/axutils.js HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	461	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:11 GMT content-type: application/javascript last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 11566 date: Wed, 26 Mar 2025 15:21:11 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	11566	IN	Data Raw: ef bb bf 2f 2a 0a 20 2a 0a 20 2a 0a 20 2a 0a 20 2a 0a 20 2a 2f 0a 63 6f 6e 73 74 20 53 54 41 52 54 5f 55 52 4c 5f 4e 41 4d 45 20 3d 20 27 73 74 61 72 74 2e 68 74 6d 6c 27 3b 0a 63 6f 6e 73 74 20 50 41 47 45 5f 49 44 5f 4e 41 4d 45 20 3d 20 27 69 64 27 3b 0a 63 6f 6e 73 74 20 50 41 47 45 5f 55 52 4c 5f 4e 41 4d 45 20 3d 20 27 70 27 3b 0a 63 6f 6e 73 74 20 53 49 54 45 4d 41 50 5f 43 4f 4c 4c 41 50 53 45 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 63 27 3b 0a 63 6f 6e 73 74 20 53 49 54 45 4d 41 50 5f 43 4f 4c 4c 41 50 53 45 5f 56 41 4c 55 45 20 3d 20 22 31 22 3b 0a 63 6f 6e 73 74 20 53 49 54 45 4d 41 50 5f 43 4c 4f 53 45 5f 56 41 4c 55 45 20 3d 20 22 32 22 3b 0a 63 6f 6e 73 74 20 47 4c 4f 42 41 4c 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 5a 51 5a 3d 73 26 27 3b 0a Data Ascii: /* * * * * */const START_URL_NAME = 'start.html';const PAGE_ID_NAME = 'id';const PAGE_URL_NAME = 'p';const SITEMAP_COLLAPSE_VAR_NAME = 'c';const SITEMAP_COLLAPSE_VALUE = "1";const SITEMAP_CLOSE_VALUE = "2";const GLOBAL_VAR_NAME = 'ZQZ=s&';

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:10 UTC	620	OUT	GET /encore/resources/scripts/messagecenter.js HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	461	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:11 GMT content-type: application/javascript last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 13419 date: Wed, 26 Mar 2025 15:21:11 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	13419	IN	Data Raw: ef bb bf 69 66 20 28 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 63 6f 6e 73 6f 6c 65 20 3d 20 7b 0a 20 20 20 20 6c 6f 67 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 7d 0a 7d 3b 0a 0a 2f 2f 20 73 6e 69 66 66 20 63 68 72 6f 6d 65 0a 76 61 72 20 43 48 52 4f 4d 45 5f 35 5f 4c 4f 43 41 4c 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 43 48 52 4f 4d 45 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 53 41 46 41 52 49 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 46 49 52 45 46 4f 58 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 57 45 42 4b 49 54 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 51 51 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 55 43 20 3d 20 66 61 6c 73 65 3b 0a 76 61 72 20 4f 53 5f 4d 41 43 20 3d 20 66 61 6c 73 65 3b Data Ascii: if (typeof console == 'undefined') console = { log: function () { }};// sniff chromevar CHROME_5_LOCAL = false;var CHROME = false;var SAFARI = false;var FIREFOX = false;var WEBKIT = false;var QQ = false;var UC = false;var OS_MAC = false;

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:11 UTC	622	OUT	GET /encore/resources/scripts/player/axplayer.js HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	462	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:11 GMT content-type: application/javascript last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 145599 date: Wed, 26 Mar 2025 15:21:11 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	16384	IN	Data Raw: ef bb bf 76 61 72 20 50 4c 55 47 49 4e 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 67 27 3b 0a 76 61 72 20 46 4f 4f 54 4e 4f 54 45 53 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 66 6e 27 3b 0a 76 61 72 20 41 44 41 50 54 49 56 45 5f 56 49 45 57 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 76 69 65 77 27 3b 0a 76 61 72 20 53 43 41 4c 45 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 73 63 27 3b 0a 76 61 72 20 44 49 4d 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 64 6d 27 3b 0a 76 61 72 20 52 4f 54 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 72 27 3b 0a 76 61 72 20 43 4c 4f 55 44 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 63 6c 27 3b 0a 76 61 72 20 54 52 41 43 45 5f 56 41 52 5f 4e 41 4d 45 20 3d 20 27 74 72 27 3b 0a 76 61 72 20 52 50 5f 56 45 52 53 49 4f 4e 20 3d 20 39 3b 0a 76 61 72 20 6c 61 73 Data Ascii: var PLUGIN_VAR_NAME = 'g';var FOOTNOTES_VAR_NAME = 'fn';var ADAPTIVE_VIEW_VAR_NAME = 'view';var SCALE_VAR_NAME = 'sc';var DIM_VAR_NAME = 'dm';var ROT_VAR_NAME = 'r';var CLOUD_VAR_NAME = 'cl';var TRACE_VAR_NAME = 'tr';var RP_VERSION = 9;var las
2025-03-26 15:21:12 UTC	16384	IN	Data Raw: 65 48 65 61 64 65 72 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6d 6f 62 69 6c 65 53 75 62 48 65 61 64 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 27 2e 70 61 67 65 4e 6f 74 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6d 6f 62 69 6c 65 54 65 78 74 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 27 2e 65 6d 70 74 79 53 74 61 74 65 54 69 74 6c 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6d 6f 62 69 6c 65 53 75 62 48 65 61 64 65 72 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 63 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 27 2e 65 6d 70 74 79 53 74 61 74 65 43 6f 6e 74 65 6e 74 27 29 2e 61 64 64 43 6c 61 73 73 28 27 6d 6f 62 69 6c 65 54 65 78 74 27 29 3b 0a Data Ascii: eHeader').addClass('mobileSubHeader'); $container.find('.pageNote').addClass('mobileText'); $container.find('.emptyStateTitle').addClass('mobileSubHeader'); $container.find('.emptyStateContent').addClass('mobileText');
2025-03-26 15:21:12 UTC	16384	IN	Data Raw: 2c 20 68 3a 20 27 30 27 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 73 44 65 76 69 63 65 20 3d 20 64 69 6d 5b 31 5d 20 21 3d 20 27 30 27 20 3f 20 74 72 75 65 20 3a 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 69 73 44 65 76 69 63 65 29 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 77 65 20 73 68 6f 75 6c 64 20 73 63 72 6f 6c 6c 20 69 66 72 61 6d 65 20 70 72 6f 67 72 61 6d 6d 61 74 69 63 61 6c 6c 79 20 66 6f 72 20 63 75 73 74 6f 6d 20 64 65 76 69 63 65 73 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 69 66 20 77 68 65 65 6c 20 65 76 65 6e 74 20 66 69 72 65 73 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 69 66 72 61 6d 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 Data Ascii: , h: '0' }; var isDevice = dim[1] != '0' ? true : false; if (!isDevice) return; // we should scroll iframe programmatically for custom devices // if wheel event fires outside of the iframe const
2025-03-26 15:21:12 UTC	16384	IN	Data Raw: 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 74 61 58 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 74 61 59 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 74 61 4d 6f 64 65 2c 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 76 61 72 20 67 65 74 44 65 6c 74 61 57 68 65 65 6c 46 61 63 74 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 74 20 64 65 6c 74 61 46 61 63 74 6f 72 20 3d 20 30 2e 30 31 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 73 4d 61 63 28 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 46 49 52 45 46 4f 58 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 74 61 46 61 63 74 6f Data Ascii: } return { deltaX, deltaY, deltaMode, } } var getDeltaWheelFactor = function () { let deltaFactor = 0.01; if (isMac()) { if (!FIREFOX) { deltaFacto
2025-03-26 15:21:12 UTC	16384	IN	Data Raw: 73 74 49 64 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 72 69 67 68 74 50 61 6e 65 6c 27 29 2e 77 69 64 74 68 28 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 72 73 70 6c 69 74 62 61 72 27 29 2e 68 69 64 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 29 3b 0a 20 20 20 20 20 20 20 20 74 6f 6f 6c 42 61 72 4f 6e 6c 79 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 24 61 78 75 72 65 2e 70 6c 61 79 65 72 2e 65 78 70 61 6e 64 Data Ascii: stId, false); }}); } else { $('.rightPanel').width(0); $('#rsplitbar').hide(); } } $(window).resize(); toolBarOnly = true; } $axure.player.expand
2025-03-26 15:21:12 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 55 73 65 72 4c 6f 67 67 65 64 49 6e 53 74 61 74 75 73 28 72 65 73 70 6f 6e 73 65 2c 20 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 2e 70 72 6f 66 69 6c 65 5b 75 73 65 72 41 63 63 74 2e 75 73 65 72 49 64 5d 29 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 6c 6c 62 61 63 6b 20 21 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 28 72 65 73 70 6f 6e 73 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 Data Ascii: setUserLoggedInStatus(response, response.data.profile[userAcct.userId]); if (callback != null) { callback(response); }
2025-03-26 15:21:12 UTC	16384	IN	Data Raw: 61 74 69 76 65 20 6d 65 6e 75 2c 20 61 73 20 61 70 70 20 6d 69 67 68 74 20 6e 6f 74 20 68 61 76 65 20 72 65 74 75 72 6e 65 64 20 76 61 6c 75 65 20 73 69 67 6e 69 66 79 69 6e 67 20 6e 61 74 69 76 65 20 61 74 20 74 68 69 73 20 70 6f 69 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4e 61 74 69 76 65 50 72 6f 74 6f 74 79 70 65 43 6f 6e 74 72 6f 6c 46 72 61 6d 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 4d 6f 62 69 6c 65 42 72 6f 77 73 65 72 43 6f 6e 74 72 6f 6c 46 72 61 6d 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 50 72 6f 6a 65 63 74 4f 70 74 69 6f 6e 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 Data Ascii: ative menu, as app might not have returned value signifying native at this point appendNativePrototypeControlFrame(); appendMobileBrowserControlFrame(); appendProjectOptions(); } ini
2025-03-26 15:21:12 UTC	16384	IN	Data Raw: 20 20 69 66 20 28 24 61 78 75 72 65 2e 70 6c 61 79 65 72 2e 69 73 4d 6f 62 69 6c 65 4d 6f 64 65 28 29 20 7c 7c 20 4d 4f 42 49 4c 45 5f 44 45 56 49 43 45 29 20 65 78 70 61 6e 64 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 6d 65 73 73 61 67 65 20 3d 3d 20 27 73 65 74 43 6f 6e 74 65 6e 74 53 63 61 6c 65 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 53 63 61 6c 65 20 3d 20 64 61 74 61 2e 73 63 61 6c 65 4e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 61 74 61 2e 63 6c 69 70 54 6f 56 69 65 77 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 61 6c 65 56 61 6c 20 3d 20 24 28 27 2e 76 70 53 63 61 6c 65 4f 70 74 69 6f 6e 27 29 2e 66 69 6e 64 28 27 2e 73 65 6c 65 63 Data Ascii: if ($axure.player.isMobileMode() \|\| MOBILE_DEVICE) expand(); } else if (message == 'setContentScale') { var resultScale = data.scaleN; if (data.clipToView) { var scaleVal = $('.vpScaleOption').find('.selec
2025-03-26 15:21:12 UTC	14527	IN	Data Raw: 74 72 69 6e 67 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 77 68 65 6e 20 74 68 65 20 70 61 67 65 20 63 68 61 6e 67 65 73 20 73 6f 20 75 73 65 72 20 64 6f 65 73 6e 27 74 20 68 61 76 65 20 74 6f 20 77 61 69 74 20 66 6f 72 20 74 68 65 20 70 61 67 65 20 74 6f 20 6c 6f 61 64 2e 20 52 50 2d 32 38 39 35 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 61 78 75 72 65 2e 70 6c 61 79 65 72 2e 73 65 74 56 61 72 49 6e 43 75 72 72 65 6e 74 55 72 6c 48 61 73 68 28 50 41 47 45 5f 49 44 5f 4e 41 4d 45 2c 20 67 65 74 50 61 67 65 49 64 42 79 55 72 6c 28 75 72 6c 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 61 78 75 72 65 2e 70 6c 61 79 65 72 2e 73 65 74 56 61 72 49 6e 43 75 72 72 65 6e 74 55 72 6c 48 61 73 68 28 50 41 47 45 5f 55 52 4c 5f 4e 41 4d 45 2c 20 75 72 6c 2e 73 75 62 Data Ascii: tring immediately when the page changes so user doesn't have to wait for the page to load. RP-2895 $axure.player.setVarInCurrentUrlHash(PAGE_ID_NAME, getPageIdByUrl(url)); $axure.player.setVarInCurrentUrlHash(PAGE_URL_NAME, url.sub

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:11 UTC	618	OUT	GET /encore/resources/scripts/player/init.js HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	459	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:11 GMT content-type: application/javascript last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 567 date: Wed, 26 Mar 2025 15:21:11 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 24 2e 68 6f 6c 64 52 65 61 64 79 28 74 72 75 65 29 3b 0a 0a 20 20 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 20 20 20 20 73 63 72 69 70 74 2e 74 79 70 65 20 3d 20 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 0a 20 20 20 20 73 63 72 69 70 74 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 73 63 72 69 70 74 2e 6f 6e 6c 6f 61 64 20 3d 20 73 63 72 69 70 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 69 73 41 62 6f 72 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 73 41 62 6f 72 74 20 7c 7c 20 21 Data Ascii: (function () { $.holdReady(true); var script = window.document.createElement("script"); script.type = "text/javascript"; script.async = true; script.onload = script.onreadystatechange = function (e, isAbort) { if (isAbort \|\| !

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:11 UTC	664	OUT	GET /encore/resources/images/caret_down.svg HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://functionalhealths.com/encore/resources/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	450	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:11 GMT content-type: image/svg+xml last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 196 date: Wed, 26 Mar 2025 15:21:11 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	196	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 22 20 68 65 69 67 68 74 3d 22 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 20 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 30 20 30 4c 35 20 35 4c 30 20 30 48 32 4c 35 20 33 4c 38 20 30 48 31 30 5a 22 20 66 69 6c 6c 3d 22 23 37 31 38 30 39 36 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="10" height="5" viewBox="0 0 10 5" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M10 0L5 5L0 0H2L5 3L8 0H10Z" fill="#718096"/></svg>

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:11 UTC	667	OUT	GET /encore/resources/images/overflow-icon.svg HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://functionalhealths.com/encore/resources/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:11 UTC	450	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:11 GMT content-type: image/svg+xml last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 991 date: Wed, 26 Mar 2025 15:21:11 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:11 UTC	991	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 2e 36 36 36 36 33 20 31 33 2e 30 30 30 32 56 38 2e 33 33 33 35 22 20 73 74 72 6f 6b 65 3d 22 23 31 45 32 39 33 42 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 2e 36 36 36 36 33 20 35 2e 36 36 36 36 37 56 31 22 20 73 74 72 6f 6b 65 3d 22 23 31 45 32 39 33 42 22 20 73 74 72 6f 6b Data Ascii: <svg width="16" height="14" viewBox="0 0 16 14" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M2.66663 13.0002V8.3335" stroke="#1E293B" stroke-linecap="round" stroke-linejoin="round"/> <path d="M2.66663 5.66667V1" stroke="#1E293B" strok

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:11 UTC	665	OUT	GET /encore/resources/images/axure9_logo.svg HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://functionalhealths.com/encore/resources/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:12 UTC	451	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:12 GMT content-type: image/svg+xml last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 2282 date: Wed, 26 Mar 2025 15:21:12 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:12 UTC	2282	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 20 31 34 22 20 77 69 64 74 68 3d 22 35 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 67 20 66 69 6c 6c 3d 22 23 33 66 34 30 34 30 22 3e 3c 70 61 74 68 20 64 3d 22 6d 36 2e 37 38 32 37 20 37 2e 30 37 39 32 76 32 2e 37 34 31 63 2d 2e 38 36 36 2e 31 31 39 2d 32 2e 31 30 31 2e 31 34 36 2d 32 2e 35 32 31 2e 31 34 36 2d 31 2e 39 39 38 20 30 2d 32 2e 30 39 2d 2e 35 34 32 2d 32 2e 30 39 2d 31 2e 35 38 31 20 30 2d 31 2e 30 31 33 2e 33 34 35 2d 31 2e 33 30 36 20 31 2e 35 34 31 2d 31 2e 33 30 36 7a Data Ascii: <svg height="14" viewBox="0 0 50 14" width="50" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><g fill="#3f4040"><path d="m6.7827 7.0792v2.741c-.866.119-2.101.146-2.521.146-1.998 0-2.09-.542-2.09-1.581 0-1.013.345-1.306 1.541-1.306z

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:12 UTC	664	OUT	GET /encore/resources/images/left_arrow.svg HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://functionalhealths.com/encore/resources/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:12 UTC	450	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:12 GMT content-type: image/svg+xml last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 199 date: Wed, 26 Mar 2025 15:21:12 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:12 UTC	199	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 30 20 31 32 4c 36 20 38 4c 31 30 20 34 22 20 73 74 72 6f 6b 65 3d 22 23 31 45 32 39 33 42 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M10 12L6 8L10 4" stroke="#1E293B" stroke-linecap="round" stroke-linejoin="round"/></svg>

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:12 UTC	659	OUT	GET /encore/resources/images/close.svg HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://functionalhealths.com/encore/resources/css/default.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:12 UTC	450	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:12 GMT content-type: image/svg+xml last-modified: Wed, 13 Nov 2024 01:03:24 GMT accept-ranges: bytes content-length: 277 date: Wed, 26 Mar 2025 15:21:12 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:12 UTC	277	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 31 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 34 4c 34 20 31 32 22 20 73 74 72 6f 6b 65 3d 22 23 31 45 32 39 33 42 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 20 34 4c 31 32 20 31 32 22 20 73 74 72 6f 6b 65 3d 22 23 31 45 32 39 33 42 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 Data Ascii: <svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M12 4L4 12" stroke="#1E293B" stroke-linecap="round" stroke-linejoin="round"/><path d="M4 4L12 12" stroke="#1E293B" stroke-linecap="round" stroke-line

Timestamp	Bytes transferred	Direction	Data
2025-03-26 15:21:12 UTC	602	OUT	GET /encore/data/document.js HTTP/1.1 Host: functionalhealths.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://functionalhealths.com/encore/?id=hh7nhs&p=mr__cooper_encryption&c=1 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 15:21:13 UTC	460	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=604800 expires: Wed, 02 Apr 2025 15:21:13 GMT content-type: application/javascript last-modified: Tue, 25 Mar 2025 22:12:07 GMT accept-ranges: bytes content-length: 4532 date: Wed, 26 Mar 2025 15:21:13 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-26 15:21:13 UTC	4532	IN	Data Raw: ef bb bf 24 61 78 75 72 65 2e 6c 6f 61 64 44 6f 63 75 6d 65 6e 74 28 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 5f 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 76 61 72 20 72 3d 7b 7d 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 20 66 6f 72 28 76 61 72 20 69 3d 30 3b 20 69 3c 61 2e 6c 65 6e 67 74 68 3b 20 69 2b 3d 32 29 20 72 5b 61 5b 69 5d 5d 3d 61 5b 69 2b 31 5d 3b 20 72 65 74 75 72 6e 20 72 3b 20 7d 0a 20 20 20 20 76 61 72 20 5f 63 72 65 61 74 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 5f 28 62 2c 5f 28 63 2c 64 2c 65 2c 66 2c 67 2c 64 2c 68 2c 64 2c 69 2c 64 2c 6a 2c 6b 2c 6c 2c 64 2c 6d 2c 66 2c 6e 2c 66 2c 6f 2c 64 2c 70 2c 66 29 2c 71 2c 5f 28 72 2c 5b 5f 28 73 2c 74 2c 75 2c 76 2c 77 2c 78 2c Data Ascii: $axure.loadDocument((function() { var _ = function() { var r={},a=arguments; for(var i=0; i<a.length; i+=2) r[a[i]]=a[i+1]; return r; } var _creator = function() { return _(b,_(c,d,e,f,g,d,h,d,i,d,j,k,l,d,m,f,n,f,o,d,p,f),q,_(r,[_(s,t,u,v,w,x,