Play interactive tourCreate Interactive Tour

Windows Analysis Report
https://links.paradigmpressgroup.com/s/c/SOzW2PIEUQvsCWemD4enibFexPUzy_4BxCwIunF1ak3pLVcUhnf-m6UV7yIM_YYyexMZXvQxCQVQWjV4So0jickDZP4eq6Uw-ZjpR809YWBuNVNcylU2i3ibMZfIa1KV8xiGtSt59ewzx0rzn3QaOBw3zuegeSU918nGvsBy-NI4d9Sj4HDLShYAcd-oW5Zn-qeqVu3QYkI7i_FNUpOpRrsNyDzxMr8r0g8cd0xIJHAZZCq2AusWQ9wUNtahNO8ohlI

Overview

General Information

Sample URL:	https://links.paradigmpressgroup.com/s/c/SOzW2PIEUQvsCWemD4enibFexPUzy_4BxCwIunF1ak3pLVcUhnf-m6UV7yIM_YYyexMZXvQxCQVQWjV4So0jickDZP4eq6Uw-ZjpR809YWBuNVNcylU2i3ibMZfIa1KV8xiGtSt59ewzx0rzn3QaOBw3zuegeSU
Analysis ID:	1670893
Infos:

Detection

Score:	20
Range:	0 - 100
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

Classification

×

Joe Sandbox Signatures

• • Phishing
• • Compliance
• • Networking
• • System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=true

Joe Sandbox AI: Page contains button: 'CLICK TO PLAY' Source: '0.2.pages.csv'

HTML page is missing a favicon

Source: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=true

HTTP Parser: No favicon

Compliance

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.65.25.115:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.65.25.115:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.135.136.169:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.132:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.92.80:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.163.125.72:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.132:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.125:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.132:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.225.31:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.137.154:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.32.181:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.32.181:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.2:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.2:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.137.156:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.217:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.92.36:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.2:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.210.67:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.144.63:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.35.223.102:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.144.125:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.212.129.39:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.196.227.84:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.196.227.84:443 -> 192.168.2.5:49816 version: TLS 1.2

Networking

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	TCP traffic detected without corresponding DNS query: 192.178.49.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /s/c/SOzW2PIEUQvsCWemD4enibFexPUzy_4BxCwIunF1ak3pLVcUhnf-m6UV7yIM_YYyexMZXvQxCQVQWjV4So0jickDZP4eq6Uw-ZjpR809YWBuNVNcylU2i3ibMZfIa1KV8xiGtSt59ewzx0rzn3QaOBw3zuegeSU918nGvsBy-NI4d9Sj4HDLShYAcd-oW5Zn-qeqVu3QYkI7i_FNUpOpRrsNyDzxMr8r0g8cd0xIJHAZZCq2AusWQ9wUNtahNO8ohlIzFD0E_uubTeLxiAsJhkf6tc5KI8ISCQZKUN1_P_gn6sbLdGRXnsL2Ta2y2nPY8ehjnYU_aMgD5YwwkQzG1e-jryR3usRhj0bqfNVWhAbYNbsKWti6xmBNFlPnWZHTk3eWs91rT3OoQwkRhl4qI5eNv2c8-Ku4-9udeJ0WbViT64C872zqZxGL31edI2roxZ0liDeUhMLZeIk58578BwNsljI_wYtAUNuYYYSmyiz7xQtDZQaihZexcoFqrBhfMNqc0AZ_INn4KeCaL8O7AL0YThxXsBKnoim-EZ8UqMymgQhsNOnkAA8RmPR_uKQMgHnKfk73kp_sdxGDP2_MDO3JJixup3n_tJqN5lV459qz_lcyChutS2jvSfboig9CbSI/mIBuZw5kYKrrAckpwyWSPIZOOZkrtlED/8 HTTP/1.1Host: links.paradigmpressgroup.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m/2433786?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email HTTP/1.1Host: pro.paradigm-press.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=true HTTP/1.1Host: pro.paradigm-press.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: 2433786=2895539; BIGipServerQEX662zAURJQLrqleAP1SA=!npmL9qoEHC4tmJJC6+h9tp1lrjN3Za6/RKA8AkgU/CHFIKMD3dZZvTo5x9LWRY4pHmAg/l7wLgxeKmE=
Source: global traffic	HTTP traffic detected: GET /p/Scripts/Common.js HTTP/1.1Host: pro.paradigm-press.infoConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: 2433786=2895539; BIGipServerQEX662zAURJQLrqleAP1SA=!npmL9qoEHC4tmJJC6+h9tp1lrjN3Za6/RKA8AkgU/CHFIKMD3dZZvTo5x9LWRY4pHmAg/l7wLgxeKmE=; EAWB5456=
Source: global traffic	HTTP traffic detected: GET /p/Scripts/HideContent.js HTTP/1.1Host: pro.paradigm-press.infoConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: 2433786=2895539; BIGipServerQEX662zAURJQLrqleAP1SA=!npmL9qoEHC4tmJJC6+h9tp1lrjN3Za6/RKA8AkgU/CHFIKMD3dZZvTo5x9LWRY4pHmAg/l7wLgxeKmE=; EAWB5456=
Source: global traffic	HTTP traffic detected: GET /assets/external/E-v1.js HTTP/1.1Host: fast.wistia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/base-styles.css HTTP/1.1Host: d2z65klgtz99km.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dlc8jyx.css HTTP/1.1Host: use.typekit.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p.css?s=1&k=dlc8jyx&ht=tk&f=39494.39495.39496.39498.39499.39500.39502&a=87035519&app=typekit&e=css HTTP/1.1Host: p.typekit.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://use.typekit.net/dlc8jyx.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /af/c906c2/00000000000000007735bb6e/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n9&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://use.typekit.net/dlc8jyx.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /af/2807c7/00000000000000007735bb48/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://use.typekit.net/dlc8jyx.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /af/8a7571/00000000000000007735bb67/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=i6&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://use.typekit.net/dlc8jyx.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /af/384d9b/00000000000000007735bb6a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://use.typekit.net/dlc8jyx.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /af/153042/00000000000000007735bb62/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n6&v=3 HTTP/1.1Host: use.typekit.netConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://use.typekit.net/dlc8jyx.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blueshift.js HTTP/1.1Host: cdn.getblueshift.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/medias/a914rq8cix.json HTTP/1.1Host: fast.wistia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://pro.paradigm-press.infoSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-841312.js?sv=6 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/external/googleAnalytics4.js HTTP/1.1Host: fast.wistia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/medias/a914rq8cix.json HTTP/1.1Host: fast.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/external/googleAnalytics.js HTTP/1.1Host: fast.wistia.comConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AW2/AWB_Upgrade_1021/urgent_message_relead/ctp3.jpg HTTP/1.1Host: d2z65klgtz99km.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.f98993dba31a932bc912.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-BYN6DTYEFQ&gacid=866186454.1745307458&gtm=45je54i1v9122066590z8811578897za200zb811578897&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&z=1798466661 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/11464267516?random=1745307458931&cv=11&fst=1745307458931&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9184021656z878323495za200zb78323495&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&ptag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fpro.paradigm-press.info%2Fp%2Fawb_upgradeguide_0223%2FEAWB5456%2F%3Fvid2%3D559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9%26utm_campaign%3DDR_ISSUE_04.21.25%26utm_source%3DIterable%26itbl_templateId%3D17383229%26itbl_campaignId%3D13289170%26utm_medium%3DEmail%26h%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Urgent%20Message%20From%20Customer%20Service&npa=0&pscdl=noapi&auid=1439931518.1745307457&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/external/engines/hls_video.js HTTP/1.1Host: fast.wistia.comConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-138958347-1&cid=866186454.1745307458&jid=881796525&gjid=746403330&_gid=467963130.1745307458&_u=YGBAiEABBAAAAGAAI~&z=1702763514 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9.6.1/bundle.min.js HTTP/1.1Host: browser.sentry-cdn.comConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AW2/AWB_Upgrade_1021/urgent_message_relead/ctp3.jpg HTTP/1.1Host: d2z65klgtz99km.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /browser-perf.8417c6bba72228fa2e29.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11464267516/?random=1745307458931&cv=11&fst=1745307458931&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9184021656z878323495za200zb78323495&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&ptag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fpro.paradigm-press.info%2Fp%2Fawb_upgradeguide_0223%2FEAWB5456%2F%3Fvid2%3D559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9%26utm_campaign%3DDR_ISSUE_04.21.25%26utm_source%3DIterable%26itbl_templateId%3D17383229%26itbl_campaignId%3D13289170%26utm_medium%3DEmail%26h%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Urgent%20Message%20From%20Customer%20Service&npa=0&pscdl=noapi&auid=1439931518.1745307457&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11464267516/?random=1745307458931&cv=11&fst=1745305200000&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9184021656z878323495za200zb78323495&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&ptag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fpro.paradigm-press.info%2Fp%2Fawb_upgradeguide_0223%2FEAWB5456%2F%3Fvid2%3D559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9%26utm_campaign%3DDR_ISSUE_04.21.25%26utm_source%3DIterable%26itbl_templateId%3D17383229%26itbl_campaignId%3D13289170%26utm_medium%3DEmail%26h%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Urgent%20Message%20From%20Customer%20Service&npa=0&pscdl=noapi&auid=1439931518.1745307457&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDZpuyzS8b37fGMbO6tYolTSG0M_rNkTsHGZQ&random=2752204599&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/medias/a914rq8cix.m3u8 HTTP/1.1Host: fast.wistia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://pro.paradigm-press.infoSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/blank.gif HTTP/1.1Host: fast.wistia.comConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/external/playPauseLoadingControl.js HTTP/1.1Host: fast.wistia.comConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/external/wistia-mux.js HTTP/1.1Host: fast.wistia.comConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicons/favicon.ico HTTP/1.1Host: d2z65klgtz99km.cloudfront.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/blank.gif HTTP/1.1Host: fast.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/medias/a914rq8cix.m3u8 HTTP/1.1Host: fast.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deliveries/3a9a30e1c590b8410614a98b0f30b50e805c9eeb.m3u8 HTTP/1.1Host: embed-cloudfront.wistia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://pro.paradigm-press.infoSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11464267516/?random=1745307458931&cv=11&fst=1745305200000&bg=ffffff&guid=ON&async=1&gtm=45be54i1v9184021656z878323495za200zb78323495&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&ptag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&u_w=1280&u_h=1024&url=https%3A%2F%2Fpro.paradigm-press.info%2Fp%2Fawb_upgradeguide_0223%2FEAWB5456%2F%3Fvid2%3D559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9%26utm_campaign%3DDR_ISSUE_04.21.25%26utm_source%3DIterable%26itbl_templateId%3D17383229%26itbl_campaignId%3D13289170%26utm_medium%3DEmail%26h%3Dtrue&hn=www.googleadservices.com&frm=0&tiba=Urgent%20Message%20From%20Customer%20Service&npa=0&pscdl=noapi&auid=1439931518.1745307457&uaa=x86&uab=64&uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDZpuyzS8b37fGMbO6tYolTSG0M_rNkTsHGZQ&random=2752204599&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicons/favicon.ico HTTP/1.1Host: d2z65klgtz99km.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mput?topic=metrics HTTP/1.1Host: pipedream.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unity.gif?t=1745307462&e=pageload&r=&z=129186&x=59976d352f424c4b27d325518576b9b2&k=7426eee6-e3d3-27f1-c2b3-837a37d5f48f&u=https%3A%2F%2Fpro.paradigm-press.info%2Fp%2Fawb_upgradeguide_0223%2FEAWB5456%2F%3Fvid2%3D559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9%26utm_campaign%3DDR_ISSUE_04.21.25%26utm_source%3DIterable%26itbl_templateId%3D17383229%26itbl_campaignId%3D13289170%26utm_medium%3DEmail%26h%3Dtrue HTTP/1.1Host: api.getblueshift.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://pro.paradigm-press.infoSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/external/allIntegrations.js HTTP/1.1Host: fast.wistia.comConnection: keep-aliveOrigin: https://pro.paradigm-press.infosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deliveries/3a9a30e1c590b8410614a98b0f30b50e805c9eeb.m3u8/seg-1-v1-a1.ts HTTP/1.1Host: embed-cloudfront.wistia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://pro.paradigm-press.infoSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mput?topic=metrics HTTP/1.1Host: pipedream.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deliveries/3a9a30e1c590b8410614a98b0f30b50e805c9eeb.m3u8 HTTP/1.1Host: embed-cloudfront.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mput?topic=metrics HTTP/1.1Host: pipedream.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unity.gif?t=1745307462&e=pageload&r=&z=129186&x=59976d352f424c4b27d325518576b9b2&k=7426eee6-e3d3-27f1-c2b3-837a37d5f48f&u=https%3A%2F%2Fpro.paradigm-press.info%2Fp%2Fawb_upgradeguide_0223%2FEAWB5456%2F%3Fvid2%3D559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9%26utm_campaign%3DDR_ISSUE_04.21.25%26utm_source%3DIterable%26itbl_templateId%3D17383229%26itbl_campaignId%3D13289170%26utm_medium%3DEmail%26h%3Dtrue HTTP/1.1Host: api.getblueshift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deliveries/3a9a30e1c590b8410614a98b0f30b50e805c9eeb.m3u8/seg-1-v1-a1.ts HTTP/1.1Host: embed-cloudfront.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deliveries/91afdcf68bb67cfff04c8449120d1b24859ca024.m3u8 HTTP/1.1Host: embed-cloudfront.wistia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://pro.paradigm-press.infoSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mput?topic=metrics HTTP/1.1Host: pipedream.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deliveries/91afdcf68bb67cfff04c8449120d1b24859ca024.m3u8 HTTP/1.1Host: embed-cloudfront.wistia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: fg8vvsvnieiv3ej16jby.litix.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: */*If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Found strings which match to known social media urls

Source: chromecache_106.1.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},fl:function(){e=pb()},Yd:function(){d()}}};var $b=ua(["data-gtm-yt-inspected-"]),jI=["www.youtube.com","www.youtube-nocookie.com"],kI,lI=!1; equals www.youtube.com (Youtube)
Source: chromecache_83.1.dr	String found in binary or memory: Wt();Do(function(){a();Ao(b)||Pm(a,b)},b)},Wt=function(){return[N.m.R,N.m.U]},Xt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Yt=/^www\.googleadservices\.com$/,bu=/^gad_source[_=](\d+)$/;function gu(){return Lo("dedupe_gclid",function(){return zr()})};var hu=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,iu=/^www.googleadservices.com$/;function ju(a){a||(a=ku());return a.qo?!1:a.on||a.pn||a.sn||a.qn||a.Hf||a.Xm||a.rn||a.fn?!0:!1}function ku(){var a={},b=es(!0);a.qo=!!b._up;var c=ut();a.on=c.aw!==void 0;a.pn=c.dc!==void 0;a.sn=c.wbraid!==void 0;a.qn=c.gbraid!==void 0;a.rn=c.gclsrc==="aw.ds";a.Hf=Ut().Hf;var d=A.referrer?fk(lk(A.referrer),"host"):"";a.fn=hu.test(d);a.Xm=iu.test(d);return a};var lu=["https://www.google.com","https://www.youtube.com","https://m.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_113.1.dr	String found in binary or memory: Wt();Do(function(){a();Ao(b)||Pm(a,b)},b)},Wt=function(){return[N.m.T,N.m.U]},Xt=/^(?:www\.)?google(?:\.com?)?(?:\.[a-z]{2}t?)?$/,Yt=/^www\.googleadservices\.com$/,bu=/^gad_source[_=](\d+)$/;function gu(){return Lo("dedupe_gclid",function(){return zr()})};var hu=/^(www\.)?google(\.com?)?(\.[a-z]{2}t?)?$/,iu=/^www.googleadservices.com$/;function ju(a){a||(a=ku());return a.po?!1:a.nn||a.on||a.rn||a.pn||a.df||a.Wm||a.qn||a.dn?!0:!1}function ku(){var a={},b=es(!0);a.po=!!b._up;var c=ut();a.nn=c.aw!==void 0;a.on=c.dc!==void 0;a.rn=c.wbraid!==void 0;a.pn=c.gbraid!==void 0;a.qn=c.gclsrc==="aw.ds";a.df=Ut().df;var d=A.referrer?fk(lk(A.referrer),"host"):"";a.dn=hu.test(d);a.Wm=iu.test(d);return a};var lu=["https://www.google.com","https://www.youtube.com","https://m.youtube.com"]; equals www.youtube.com (Youtube)
Source: chromecache_106.1.dr, chromecache_110.1.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=OE(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=zb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},RE=function(){var a=[],b=function(c){return eb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_106.1.dr	String found in binary or memory: if(!(f||g||k||m.length||n.length))return;var q={ni:f,li:g,mi:k,Xi:m,Yi:n,Gf:p,Wb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var t=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){t&&t();d()};D(function(){for(var u=A.getElementsByTagName("script"),v=u.length,w=0;w<v;w++){var x=u[w].getAttribute("src");if(uI(x,"iframe_api")||uI(x,"player_api"))return e}for(var y=A.getElementsByTagName("iframe"),B=y.length,C=0;C<B;C++)if(!lI&&sI(y[C],q.Gf))return rc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: return f}hI.K="internal.enableAutoEventOnTimer";var $b=ua(["data-gtm-yt-inspected-"]),jI=["www.youtube.com","www.youtube-nocookie.com"],kI,lI=!1; equals www.youtube.com (Youtube)
Source: chromecache_106.1.dr, chromecache_110.1.dr, chromecache_119.1.dr	String found in binary or memory: var wH=function(a,b,c,d,e){var f=lE("fsl",c?"nv.mwt":"mwt",0),g;g=c?lE("fsl","nv.ids",[]):lE("fsl","ids",[]);if(!g.length)return!0;var k=qE(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!IC(k,KC(b, equals www.facebook.com (Facebook)

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: links.paradigmpressgroup.com
Source: global traffic	DNS traffic detected: DNS query: pro.paradigm-press.info
Source: global traffic	DNS traffic detected: DNS query: fast.wistia.com
Source: global traffic	DNS traffic detected: DNS query: d2z65klgtz99km.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: cdn.getblueshift.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: browser.sentry-cdn.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: pipedream.wistia.com
Source: global traffic	DNS traffic detected: DNS query: distillery.wistia.com
Source: global traffic	DNS traffic detected: DNS query: embed-cloudfront.wistia.com
Source: global traffic	DNS traffic detected: DNS query: api.getblueshift.com
Source: global traffic	DNS traffic detected: DNS query: fg8vvsvnieiv3ej16jby.litix.io
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: e2c70.gcp.gvt2.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /ccm/collect?en=page_view&dl=https%3A%2F%2Fpro.paradigm-press.info%2Fp%2Fawb_upgradeguide_0223%2FEAWB5456%2F&scrsrc=www.googletagmanager.com&frm=0&rnd=442322754.1745307457&dt=Urgent%20Message%20From%20Customer%20Service&auid=1439931518.1745307457&navt=n&npa=0&gtm=45He54i1v811578897za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=102803279~102813109~102887800~102926062~103027016~103051953~103055465~103077950~103106314~103106316&tft=1745307456981&tfd=8164&apve=1 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://pro.paradigm-press.infoX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/?vid2=559d8a459fcafd780e411bee2c28959be7b72065b550d81afe35cf8c59e3b6bf7605abf411f31265600fafa47f7669a5abd809fae670a2413330af943bf4a6d9&utm_campaign=DR_ISSUE_04.21.25&utm_source=Iterable&itbl_templateId=17383229&itbl_campaignId=13289170&utm_medium=Email&h=trueAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

URLs found in memory or binary data

Source: chromecache_129.1.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735bb48
Source: chromecache_129.1.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735bb53
Source: chromecache_129.1.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735bb5a
Source: chromecache_129.1.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735bb62
Source: chromecache_129.1.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735bb67
Source: chromecache_129.1.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735bb6a
Source: chromecache_129.1.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735bb6e
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_83.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_99.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
Source: chromecache_116.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/AW2/AWB_Upgrade_1021/urgent_message_relead/ctp.jpg
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/AW2/AWB_Upgrade_1021/urgent_message_relead/ctp3.jpg
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/css/base-styles.css
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/customer-survey-results/?page=
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/favicons/apple-touch-icon.png
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/favicons/favicon-16x16.png
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/favicons/favicon-32x32.png
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/favicons/favicon.ico
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/favicons/safari-pinned-tab.svg
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/favicons/site.webmanifest
Source: chromecache_84.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/img/checkmark1.png);
Source: chromecache_99.1.dr	String found in binary or memory: https://d2z65klgtz99km.cloudfront.net/manifest.webmanifest
Source: chromecache_127.1.dr, chromecache_87.1.dr	String found in binary or memory: https://embed-cloudfront.wistia.com/deliveries/3a9a30e1c590b8410614a98b0f30b50e805c9eeb.m3u8
Source: chromecache_127.1.dr, chromecache_87.1.dr	String found in binary or memory: https://embed-cloudfront.wistia.com/deliveries/72177f5ac700725751521abe2079fd77a2bd7ea1.m3u8
Source: chromecache_127.1.dr, chromecache_87.1.dr	String found in binary or memory: https://embed-cloudfront.wistia.com/deliveries/91afdcf68bb67cfff04c8449120d1b24859ca024.m3u8
Source: chromecache_127.1.dr, chromecache_87.1.dr	String found in binary or memory: https://embed-cloudfront.wistia.com/deliveries/c34fbad46233f3de5fdef22f48f001d8cfb29112.m3u8
Source: chromecache_99.1.dr	String found in binary or memory: https://fast.wistia.com/assets/external/E-v1.js
Source: chromecache_122.1.dr	String found in binary or memory: https://github.com/getsentry/sentry-javascript
Source: chromecache_85.1.dr, chromecache_119.1.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://google.com
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://google.com/pagead/form-data
Source: chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://m.youtube.com
Source: chromecache_129.1.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=dlc8jyx&ht=tk&f=39494.39495.39496.39498.39499.39500.39502&a=870355
Source: chromecache_83.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/ccm/collect
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_99.1.dr	String found in binary or memory: https://paradigmpressgroup.com/privacy-policy
Source: chromecache_99.1.dr	String found in binary or memory: https://paradigmpressgroup.com/terms-conditions
Source: chromecache_99.1.dr	String found in binary or memory: https://privacyportal-cdn.onetrust.com/dsarwebform/90ddaa87-9d70-4282-9d4f-d6cbd96bd224/2f095f1e-de2
Source: chromecache_99.1.dr	String found in binary or memory: https://pro.paradigm-press.info/o/awb_upgradeguide_0223/EAWB5456?vid2=559d8a459fcafd780e411bee2c2895
Source: chromecache_99.1.dr	String found in binary or memory: https://pro.paradigm-press.info/p/awb_upgradeguide_0223/EAWB5456/Full?vid2=559d8a459fcafd780e411bee2
Source: chromecache_90.1.dr	String found in binary or memory: https://reports.agorafinancial.com/LIR_bookofincomePA_0317/ELIRT1N1/index.htm?pageNumber=2
Source: chromecache_85.1.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_83.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_83.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_116.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_116.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_90.1.dr	String found in binary or memory: https://threefounderspublishing.com/privacy-policy/
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/153042/00000000000000007735bb62/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/153042/00000000000000007735bb62/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/153042/00000000000000007735bb62/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/1ba16c/00000000000000007735bb5a/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/1ba16c/00000000000000007735bb5a/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/1ba16c/00000000000000007735bb5a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/2807c7/00000000000000007735bb48/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/2807c7/00000000000000007735bb48/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/2807c7/00000000000000007735bb48/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/2b59e1/00000000000000007735bb53/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/2b59e1/00000000000000007735bb53/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/2b59e1/00000000000000007735bb53/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/384d9b/00000000000000007735bb6a/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/384d9b/00000000000000007735bb6a/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/384d9b/00000000000000007735bb6a/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/8a7571/00000000000000007735bb67/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/8a7571/00000000000000007735bb67/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/8a7571/00000000000000007735bb67/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/c906c2/00000000000000007735bb6e/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/c906c2/00000000000000007735bb6e/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_129.1.dr	String found in binary or memory: https://use.typekit.net/af/c906c2/00000000000000007735bb6e/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_99.1.dr	String found in binary or memory: https://use.typekit.net/dlc8jyx.css
Source: chromecache_85.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_116.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_116.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_116.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_83.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_116.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.google.com/ccm/collect
Source: chromecache_124.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11464267516/?random
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.google.com/pagead/form-data
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.google.com/travel/flights/click/conversion
Source: chromecache_83.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_83.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_116.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_99.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_99.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NKRVP76
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_106.1.dr, chromecache_113.1.dr, chromecache_110.1.dr, chromecache_85.1.dr, chromecache_119.1.dr, chromecache_83.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_106.1.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Uses secure TLS version for HTTPS connections

Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.65.25.115:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.65.25.115:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.135.136.169:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.132:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.92.80:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.73.207:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.163.125.72:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.132:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.125:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.132:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.225.31:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.137.154:443 -> 192.168.2.5:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.32.181:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.239.32.181:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.2:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.2:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.137.156:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.217:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.92.36:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.2:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.210.67:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.144.63:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.167.212.46:443 -> 192.168.2.5:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.35.223.102:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.144.125:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.212.129.39:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.196.227.84:443 -> 192.168.2.5:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.196.227.84:443 -> 192.168.2.5:49816 version: TLS 1.2

System Summary

Classification label

Source: classification engine

Classification label: sus20.win@28/99@76/25

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2976,i,9774267658916376544,15904382200663800543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3036 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2976,i,9774267658916376544,15904382200663800543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4960 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://links.paradigmpressgroup.com/s/c/SOzW2PIEUQvsCWemD4enibFexPUzy_4BxCwIunF1ak3pLVcUhnf-m6UV7yIM_YYyexMZXvQxCQVQWjV4So0jickDZP4eq6Uw-ZjpR809YWBuNVNcylU2i3ibMZfIa1KV8xiGtSt59ewzx0rzn3QaOBw3zuegeSU918nGvsBy-NI4d9Sj4HDLShYAcd-oW5Zn-qeqVu3QYkI7i_FNUpOpRrsNyDzxMr8r0g8cd0xIJHAZZCq2AusWQ9wUNtahNO8ohlIzFD0E_uubTeLxiAsJhkf6tc5KI8ISCQZKUN1_P_gn6sbLdGRXnsL2Ta2y2nPY8ehjnYU_aMgD5YwwkQzG1e-jryR3usRhj0bqfNVWhAbYNbsKWti6xmBNFlPnWZHTk3eWs91rT3OoQwkRhl4qI5eNv2c8-Ku4-9udeJ0WbViT64C872zqZxGL31edI2roxZ0liDeUhMLZeIk58578BwNsljI_wYtAUNuYYYSmyiz7xQtDZQaihZexcoFqrBhfMNqc0AZ_INn4KeCaL8O7AL0YThxXsBKnoim-EZ8UqMymgQhsNOnkAA8RmPR_uKQMgHnKfk73kp_sdxGDP2_MDO3JJixup3n_tJqN5lV459qz_lcyChutS2jvSfboig9CbSI/mIBuZw5kYKrrAckpwyWSPIZOOZkrtlED/8"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2976,i,9774267658916376544,15904382200663800543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4608 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2976,i,9774267658916376544,15904382200663800543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3036 /prefetch:3			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2976,i,9774267658916376544,15904382200663800543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4960 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2976,i,9774267658916376544,15904382200663800543,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4608 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected